a78b62dc22147b8de9ff3e80affed266eb62a54560b41bf57767748b1d68ec62

General

Target

a78b62dc22147b8de9ff3e80affed266eb62a54560b41bf57767748b1d68ec62
Size

32KB
MD5

5205eb6c6969f77845d571c9b66678d8
SHA1

632661180f84220352bf972d9d2a31172139befb
SHA256

a78b62dc22147b8de9ff3e80affed266eb62a54560b41bf57767748b1d68ec62
SHA512

026f3d4c5bb8b717289227c76ac65de6e7fa389e92b14463833403a7ad0d3ae4d7343f340daf3123aeb525184e4c5d2b1074ef5fcf366b1bfc512d2803c310ba
SSDEEP

384:QZSqS+fgsmlrzDZQ8m+yyT93xs1joYZp0hKDBKD:QvS+WDZQ8dymbs1jo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78b62dc22147b8de9ff3e80affed266eb62a54560b41bf57767748b1d68ec62

Files

a78b62dc22147b8de9ff3e80affed266eb62a54560b41bf57767748b1d68ec62
.exe windows:4 windows x86

60a1d3b53351a6b9ef681e0ac55d532c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
GetVolumeInformationA
GetLogicalDriveStringsA
Sleep
CloseHandle
WaitForSingleObject
CreateProcessA
GetLastError
CreateMutexA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
GetDriveTypeA
GetModuleFileNameA
FreeEnvironmentStringsA
GetOEMCP
GetProcAddress
VirtualFree
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP

user32

RedrawWindow
FindWindowA
SetWindowTextA
FindWindowExA
MessageBoxA

dll

InstallHook
UninstallHook

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

60a1d3b53351a6b9ef681e0ac55d532c

Headers

File Characteristics

Imports

kernel32

user32

dll

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB