7f8a914abe75e72c63237c90ede3a4169a117f6c2f571e319fe6dfc85b30d2d9

General

Target

7f8a914abe75e72c63237c90ede3a4169a117f6c2f571e319fe6dfc85b30d2d9
Size

32KB
MD5

6ccd9554f5466511e0aba4d06eee9979
SHA1

0269b377725140ba91baac5b28568bf9992fea07
SHA256

7f8a914abe75e72c63237c90ede3a4169a117f6c2f571e319fe6dfc85b30d2d9
SHA512

60d2a1e661a39560b3aae63bf44afd88e56b599a5fccbe2b7fee6d29af55df2c40263d51ba105e10029191b92c5807841c0b6b2f7f5b7fedb119b58e2340bc60
SSDEEP

384:E+3SsA1+3A6673+lKbH6+d0TcRJ+hiVFTOAxe0WxuFnZ6Crg1VtqIjO:QVt0c+hiVIAs7uFICrg2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f8a914abe75e72c63237c90ede3a4169a117f6c2f571e319fe6dfc85b30d2d9

Files

7f8a914abe75e72c63237c90ede3a4169a117f6c2f571e319fe6dfc85b30d2d9
.exe windows:5 windows x64

3395f1d48686e9b110f3ec36021c11b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_fpreset
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_wtoi
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
malloc
_vsnwprintf
memset
memcpy
wcscmp

kernel32

TlsGetValue
GetLastError
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
WriteConsoleW
WideCharToMultiByte
WriteFile
SetLastError
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
EnterCriticalSection
InitializeCriticalSection
GetStdHandle
GetConsoleCP
GetConsoleOutputCP
SetConsoleCP
SetConsoleOutputCP
FindResourceExW
LockResource
GetFileType
GetModuleHandleW
GetProcAddress
LoadResource
GetConsoleMode

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3395f1d48686e9b110f3ec36021c11b8

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 544B

.pdata Size: 512B - Virtual size: 444B

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 512B - Virtual size: 28B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 544B

.pdata
Size: 512B - Virtual size: 444B

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 512B - Virtual size: 28B