990ab78de6138c033f91c52c92dde2babfb292cbb9e39f28a3d5cb187536224e

General

Target

990ab78de6138c033f91c52c92dde2babfb292cbb9e39f28a3d5cb187536224e
Size

124KB
MD5

38d0012bc163be12e1c02c01a58a39f4
SHA1

42249c1f57bccea540f1719d39b1c4b66bc65c95
SHA256

990ab78de6138c033f91c52c92dde2babfb292cbb9e39f28a3d5cb187536224e
SHA512

f9c7ea6e3e9889077bf46de17e70955a666319c780dea1639cfe5e9bcd5c991497a90a3f3fd9d9749ce6db60d7cc7cb2923d9144537c7df9e1831536b8d062c1
SSDEEP

3072:KQFjHNpwsA21hW641uTKfpD5YVLrSF8TuaPViopi+6ZzF18l/hdJinb6:1FjHksAodjKfpyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990ab78de6138c033f91c52c92dde2babfb292cbb9e39f28a3d5cb187536224e

Files

990ab78de6138c033f91c52c92dde2babfb292cbb9e39f28a3d5cb187536224e
.exe windows:4 windows x64 arch:x64

3bc79b8c6b5be4636aec2528092028ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
GetCommandLineW
GetConsoleScreenBufferInfo
GetStdHandle
WriteFile
WriteConsoleW
SetConsoleTextAttribute
OutputDebugStringW
GetConsoleMode
GetCurrentProcess
GetVersion
GetSystemInfo
GetEnvironmentVariableW
HeapAlloc
GetProcessHeap
HeapFree
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
FormatMessageW
LocalFree
SetLastError
GetFileAttributesW
GetLastError
CreateDirectoryW
MoveFileExW
CreateFileW
DeleteFileW
SystemTimeToFileTime
DeviceIoControl
GetFileSize
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetModuleFileNameW
GetTempFileNameW
RemoveDirectoryW
SetFileAttributesW
GetCurrentDirectoryW
ReadFile
SetFilePointer
GetTempPathW
ResetEvent
PeekNamedPipe
WaitForMultipleObjectsEx
GetFileType
GetFileInformationByHandle
SetFileTime
GetTimeZoneInformation
GetFileTime
FindClose
FindNextFileW
FindFirstFileW
CreateMutexW
CreateEventW
SetEvent
WaitForSingleObject
ReleaseMutex
CreateThread

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bc79b8c6b5be4636aec2528092028ac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 776B

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 776B