91b1872e5195455b0b6fd4602dd682a0_exe32[.]exe

General

Target

91b1872e5195455b0b6fd4602dd682a0_exe32.exe
Size

167KB
MD5

91b1872e5195455b0b6fd4602dd682a0
SHA1

ed4dd42b9a92969d7094778b4bbd6809ba0c5efc
SHA256

d1c8044f5b2e3db00c5526e01387215981a9bb1c4ae8b771a31830cb18472309
SHA512

83351c0f0816b13ecdbd919936effbfc279f8938dcbefeff013c8eb2dca0d05d53cc2f6bcd0695ee16c40e8dd83bf1027d6189df4821279b6d845bdfa6ff2f46
SSDEEP

3072:OvBqKIBTMuqiLuRNhEv7xkHK80SWn7M+0HvA9SDADeak7dJHB/AI:OvBqKIBTxqiLuVEvtkHsR7wASsQLH5AI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91b1872e5195455b0b6fd4602dd682a0_exe32.exe

Files

91b1872e5195455b0b6fd4602dd682a0_exe32.exe
.exe windows:4 windows x86

617daef278d45816f65266fb46dc34b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetTickCount
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetLastError
CloseHandle
SetFilePointer
ReadFile
GetProcAddress
FlushFileBuffers
WriteFile
SetHandleCount
GetFileType
GetStdHandle
GetCPInfo
GetACP
HeapCreate
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
CreateFileA
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

617daef278d45816f65266fb46dc34b8

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 44KB - Virtual size: 840KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 44KB - Virtual size: 44KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 44KB - Virtual size: 840KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 44KB - Virtual size: 44KB