1498567bfacf43caeb04958436739195

General

Target

1498567bfacf43caeb04958436739195
Size

3.4MB
MD5

1498567bfacf43caeb04958436739195
SHA1

87b93eed9fe4f0733546c852c13095324037b901
SHA256

50c2510eaa2ea003aa394c9a4fd2f113e16513e5a1e014e5b9bb6956a00a31f9
SHA512

6b63442ba9312fdebf1a47d798b18d047f42e6157c9f7bb4dca604ea04978be8019f78a176b0aeb7d8db262eaeebf4cdc3654855eddb58142b78c7873db77f4a
SSDEEP

98304:TWxiWw7pgvwshC2B9Ogbp+l8WYcPGTPM2M5h:qNw7piw65Ogb68jcPGTPw5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1498567bfacf43caeb04958436739195

Files

1498567bfacf43caeb04958436739195
.exe windows:4 windows x86 arch:x86

3476a9f0409ef8a94bc4db0f31170e63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetProcAddress
CloseHandle
UnhandledExceptionFilter
GetTickCount
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LocalFree
DeleteCriticalSection
EnterCriticalSection
WriteFile
WaitForSingleObject
GetProcessHeap
CreateFileW
ExitProcess
GetModuleFileNameW
IsDebuggerPresent
RaiseException
SetEvent
TlsSetValue
CreateEventW
HeapSetInformation
WriteConsoleW
LoadLibraryExW
CreateThread
TlsFree
SetFilePointer
GetFileAttributesW
CompareStringW
LCMapStringW
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetEnvironmentStringsW
FindNextFileW
IsValidCodePage
FindFirstFileW
DeleteFileW
GetConsoleCP
LocalAlloc
GetCommandLineA
DecodePointer
GetVersionExW
CreateFileA
OutputDebugStringW
EncodePointer
GetFullPathNameW
UnmapViewOfFile
GetExitCodeProcess
ExpandEnvironmentStringsW

user32

LoadStringW
DispatchMessageW
DestroyWindow
ReleaseDC
DefWindowProcW
MessageBoxW
GetMessageW
GetDlgItem
GetSystemMetrics
GetDC
SendMessageW
GetClientRect
EnableWindow
LoadCursorW
SetWindowTextW
LoadIconW
SetFocus
GetSysColor
EndPaint
BeginPaint
ScreenToClient
SetCursor
GetWindow
GetWindowTextW
UpdateWindow
SystemParametersInfoW
MessageBoxA
CharUpperW

Sections

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3476a9f0409ef8a94bc4db0f31170e63

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 2KB

.data Size: - Virtual size: 612KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.text Size: 6KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 6KB - Virtual size: 6KB