593b637e4678227411de73321d905b8bc9813e0231a3995f8c40fb7f4ecbe581

General

Target

593b637e4678227411de73321d905b8bc9813e0231a3995f8c40fb7f4ecbe581
Size

127KB
MD5

a4d2ae3418862401581aacacd74d856c
SHA1

0e7e775e45e6b9b1e73864554025d31758f0c87d
SHA256

593b637e4678227411de73321d905b8bc9813e0231a3995f8c40fb7f4ecbe581
SHA512

b047227687eb2fd7646d21bb029214e372c2c7c3c22bf99f174c1d1faefd343dc67cfbd19d125c9888962ae3aefa29c3b10dc50decb41d4aaeddd776b33435d5
SSDEEP

3072:sQwFYviYY2+YT6cZ6gLXY0mEFSWix7syyaWE12dJxpDKcf/WVoKEQWnq+:sntBUq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
593b637e4678227411de73321d905b8bc9813e0231a3995f8c40fb7f4ecbe581

Files

593b637e4678227411de73321d905b8bc9813e0231a3995f8c40fb7f4ecbe581
.exe windows:5 windows x86

343e3772799f843befd6b7ec53416d60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_wsystem
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
malloc
memcpy
memset
_vsnwprintf
_flushall
_wcsicmp
wcscmp

kernel32

GetProcessHeap
TlsGetValue
GetLastError
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
GetConsoleMode
LockResource
LoadResource
GetProcAddress
GetFileType
FindResourceExW
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
WriteFile
SetLastError
GetStdHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

343e3772799f843befd6b7ec53416d60

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 652B

.rsrc Size: 113KB - Virtual size: 113KB

.reloc Size: 1024B - Virtual size: 520B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 652B

.rsrc
Size: 113KB - Virtual size: 113KB

.reloc
Size: 1024B - Virtual size: 520B