9868f2862a376b7366156c58d652008851dffe937ba14c4419fb202688349d2b

General

Target

9868f2862a376b7366156c58d652008851dffe937ba14c4419fb202688349d2b
Size

1.4MB
MD5

38439da9448399aaee0bb5aa93395054
SHA1

dfba7203e3d28bbc5bd2a89d6589a1ba65757cf7
SHA256

9868f2862a376b7366156c58d652008851dffe937ba14c4419fb202688349d2b
SHA512

f8ceeeda2c7c5b639515d368f0c3901daaecb1af61915ca0194b928b61f86042561c6e9ce4d6f0c4c20b8389eaa45fc7e2c445f9ab866cecfd0ff991be218530
SSDEEP

24576:Hv14fKi10YQfZ1aKFnO2sG/GmOeiQdY7i97ybuyVkbvbmMnkmEU517gmO0EAd:Piftu2iOatB9m7i97OuEebZknUz7gp0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9868f2862a376b7366156c58d652008851dffe937ba14c4419fb202688349d2b

Files

9868f2862a376b7366156c58d652008851dffe937ba14c4419fb202688349d2b
.exe windows:5 windows x86

6f4aea8c4de6d7914efdd29bde46e349

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetCurrentProcess
HeapFree
CloseHandle
HeapAlloc

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
SetWindowLongA

advapi32

RegDeleteKeyA
RegCreateKeyA
RegCloseKey
RegQueryValueA

ole32

CoUninitialize
CoInitializeEx
CoInitialize

Sections

.text
Size: 1.1MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 118KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6f4aea8c4de6d7914efdd29bde46e349

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 1.1MB - Virtual size: 2.4MB

.rdata Size: 191KB - Virtual size: 481KB

.data Size: 83KB - Virtual size: 460KB

.data1 Size: 512B - Virtual size: 2KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: - Virtual size: 118KB

.adata Size: 68KB - Virtual size: 114KB

.text
Size: 1.1MB - Virtual size: 2.4MB

.rdata
Size: 191KB - Virtual size: 481KB

.data
Size: 83KB - Virtual size: 460KB

.data1
Size: 512B - Virtual size: 2KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: - Virtual size: 118KB

.adata
Size: 68KB - Virtual size: 114KB