3c725fd02da171478a33adb188a4cac5

General

Target

3c725fd02da171478a33adb188a4cac5
Size

3.4MB
MD5

3c725fd02da171478a33adb188a4cac5
SHA1

94cd18fddb136fe12f151990c79d0c579fe0a27f
SHA256

4f66f3b38f7c45b6c77847d833ecf0fbb1f13220f062cca2fe849897740e0cd4
SHA512

527f2ff7628c9ef326b1ff9b5701953a0559707ddad98b182fd70e0042c141d358ef95a52bdee8cd8e0f28db19a1adf859c136aefef7b12c243653c99f203502
SSDEEP

98304:ujVO3R7ZSvWPy9zOMz/johuLiBoPioKcYaR:ujyR1bPG5jIsiw4cx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c725fd02da171478a33adb188a4cac5

Files

3c725fd02da171478a33adb188a4cac5
.exe windows:4 windows x86 arch:x86

5050d9c88bf6ac9af95c9fedb4b9283a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleW
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
SetLastError
HeapFree
LocalFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetStdHandle
GetStartupInfoW
IsDebuggerPresent
GetCommandLineW
FindClose
RaiseException
TlsGetValue
GetModuleHandleA
FlushFileBuffers
CreateEventW
HeapSize
LoadLibraryW
CompareStringW
GetModuleFileNameA
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
FindNextFileW
IsValidCodePage
FindFirstFileW
VirtualAlloc
GetConsoleCP
GetCommandLineA
DecodePointer
SetEndOfFile
GetVersionExW
ReleaseMutex
OutputDebugStringW
LoadLibraryA
CreateDirectoryW
GetFullPathNameW
LoadResource
UnmapViewOfFile
ExpandEnvironmentStringsW
CreateProcessW

user32

TranslateMessage
LoadStringW
DispatchMessageW
ShowWindow
DestroyWindow
ReleaseDC
GetWindowLongW
GetDlgItem
GetDC
GetWindowRect
PostMessageW
GetClientRect
SetWindowPos
GetParent
SetWindowTextW
SetTimer
EndPaint
ScreenToClient
SetCursor
KillTimer
RegisterClassW
EnableMenuItem
GetWindowTextW
SystemParametersInfoW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5050d9c88bf6ac9af95c9fedb4b9283a

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 612KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 612KB