3f1c9bbd1b3b4aa4416275fffb2ce3ecae409880708eb70b47fa98bf52d1f668

General

Target

3f1c9bbd1b3b4aa4416275fffb2ce3ecae409880708eb70b47fa98bf52d1f668
Size

38KB
MD5

46a87b0e7b9e9bdf757b0ee0c00f736d
SHA1

9e6c1f7da82f46f14bba897fbf1608907192878b
SHA256

3f1c9bbd1b3b4aa4416275fffb2ce3ecae409880708eb70b47fa98bf52d1f668
SHA512

62133d12c030a5e4aab7be0f7861d8e30dcd731bafa8c3f32241edf87cfe136201aff2afc32ac4a25eb2cef91b93195b9be8aad127fdbf4a3feb0735818e3534
SSDEEP

384:pa59fRcun4H8l5DKZUzRnn40g07JygpShDiWZChkb5+sVa1ymeKuL:85Fx/KeZ4qQaShGW4hkb5+s01reKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1c9bbd1b3b4aa4416275fffb2ce3ecae409880708eb70b47fa98bf52d1f668

Files

3f1c9bbd1b3b4aa4416275fffb2ce3ecae409880708eb70b47fa98bf52d1f668
.exe windows:5 windows x86

3e87aaffb474e54bea5ba6e1b028fb73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
exit
fclose
__wgetmainargs
_amsg_exit
__setusermatherr
malloc
memcpy
_vsnwprintf
memset
_iob
_wcsupr
_wcsicmp
wcsstr
wcsrchr
wcslen
towupper
_wfopen
fgetws

kernel32

GetThreadLocale
TlsGetValue
GetLastError
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
GetConsoleMode
LockResource
LoadResource
GetProcAddress
GetFileType
FindResourceExW
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
WriteFile
SetLastError
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
FindClose
FindFirstFileW
FindNextFileW
GetStdHandle
CompareStringW
EnterCriticalSection
InitializeCriticalSection

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e87aaffb474e54bea5ba6e1b028fb73

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 396B

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 492B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 396B

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 492B