4f6f7cab9480a5a6adfe70f54be21c66705afd94f4b74a96f334d98100d46fab

General

Target

4f6f7cab9480a5a6adfe70f54be21c66705afd94f4b74a96f334d98100d46fab
Size

116KB
MD5

4b38d5e6123bce89f7483354b3750d4d
SHA1

14536bdaf7df5f92fb738383924746cb0a9dcdc1
SHA256

4f6f7cab9480a5a6adfe70f54be21c66705afd94f4b74a96f334d98100d46fab
SHA512

452ffbd8811905b7a7956caeb4237d8df7ddfc4e24457cd43b4a38f4abf454966b15ec8ff72626288715dd84d2145694fd5ee4c589668bc81c0d7fb876abf0d9
SSDEEP

3072:t5eNRa2yapVla2yapVK+nkQa2yapVla2yapVla2yapVla2yapVla2yapVla2yapd:tw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f6f7cab9480a5a6adfe70f54be21c66705afd94f4b74a96f334d98100d46fab

Files

4f6f7cab9480a5a6adfe70f54be21c66705afd94f4b74a96f334d98100d46fab
.exe windows:5 windows x86

087a3eb3011a3bbeb4f71adc0731306e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
wcschr
wcsrchr
_wcsicmp
towupper
iswctype
abs
calloc
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
wcstoul
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
_vsnwprintf
wcslen
memset
memcpy
malloc
free

shlwapi

PathAppendW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathAddExtensionW

kernel32

FindNextFileW
TlsGetValue
GetLastError
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
GetConsoleMode
LockResource
LoadResource
GetProcAddress
GetFileType
FindResourceExW
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
WriteFile
SetLastError
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
EnterCriticalSection
InitializeCriticalSection
CompareStringW
CloseHandle
CreateFileW
CreateFileMappingW
FindClose
FindFirstFileW
UnmapViewOfFile
GetFileSizeEx
GetStdHandle
MapViewOfFile
CompareStringA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

087a3eb3011a3bbeb4f71adc0731306e

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

kernel32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 364B

.rsrc Size: 86KB - Virtual size: 85KB

.reloc Size: 1024B - Virtual size: 620B

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 364B

.rsrc
Size: 86KB - Virtual size: 85KB

.reloc
Size: 1024B - Virtual size: 620B