0eafa46b9c7d2b304c5471b685f72d654d36398b6d4f8e92d59de37421214bed

General

Target

0eafa46b9c7d2b304c5471b685f72d654d36398b6d4f8e92d59de37421214bed
Size

32KB
MD5

1cd9a833e36f2bb4b6c36bcb93ab75fe
SHA1

2d7408b17790b44c6474af0ca580fea4f73725da
SHA256

0eafa46b9c7d2b304c5471b685f72d654d36398b6d4f8e92d59de37421214bed
SHA512

428538b77742d513a80bc8400878fc1584d7ad0c2180cff39605408e0d04b3c52508993ce56903f206d8dfc47cb3cb90aa8490f68619e2c6c45141bceffcd6b0
SSDEEP

384:h+3SsA1+3A6673+lKbH6+d0TcRJ+hiVUTOAxe0WxuFnZ6Crg1VtqIjO:9Vt0c+hiV3As7uFICrg2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eafa46b9c7d2b304c5471b685f72d654d36398b6d4f8e92d59de37421214bed

Files

0eafa46b9c7d2b304c5471b685f72d654d36398b6d4f8e92d59de37421214bed
.exe windows:5 windows x64

3395f1d48686e9b110f3ec36021c11b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_fpreset
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_wtoi
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
malloc
_vsnwprintf
memset
memcpy
wcscmp

kernel32

TlsGetValue
GetLastError
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
WriteConsoleW
WideCharToMultiByte
WriteFile
SetLastError
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
EnterCriticalSection
InitializeCriticalSection
GetStdHandle
GetConsoleCP
GetConsoleOutputCP
SetConsoleCP
SetConsoleOutputCP
FindResourceExW
LockResource
GetFileType
GetModuleHandleW
GetProcAddress
LoadResource
GetConsoleMode

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3395f1d48686e9b110f3ec36021c11b8

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 544B

.pdata Size: 512B - Virtual size: 444B

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 512B - Virtual size: 28B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 544B

.pdata
Size: 512B - Virtual size: 444B

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 512B - Virtual size: 28B