4c433e60fccb09c58b4427d92b3897de

General

Target

4c433e60fccb09c58b4427d92b3897de
Size

3.4MB
MD5

4c433e60fccb09c58b4427d92b3897de
SHA1

22736f85a6de2cb83117689aa85560c680a22870
SHA256

eaefa1ea70a7bf85d0e6969e37a7416d25dd4028d196ea9b05df677fa38d2ae2
SHA512

279c998572d0580699bf84ae32c390ef5de557b1745992befe0a0b80e1db42233f6340cc017e83a4f7f9b3ef34cc5d1ea3bdd7d95399dc9b0ee032733c0eca10
SSDEEP

98304:gCTdeAAwptIw5KsF9iF2gnU80kDdiXMmwDdRBH:KVdBsfiFxnU8xDdiXXwJ3H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c433e60fccb09c58b4427d92b3897de

Files

4c433e60fccb09c58b4427d92b3897de
.exe windows:4 windows x86 arch:x86

2f51c2d3ecbe648af9f3b02ef826f9fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetProcAddress
Sleep
GetTickCount
FreeLibrary
MultiByteToWideChar
SetLastError
LocalFree
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObject
GetProcessHeap
CreateFileW
ExitProcess
GetModuleFileNameW
GetStartupInfoW
GetCommandLineW
FindClose
GetACP
FormatMessageW
TlsGetValue
InitializeCriticalSection
HeapReAlloc
FlushFileBuffers
HeapSetInformation
HeapSize
WriteConsoleW
LoadLibraryW
LoadLibraryExW
GetCPInfo
TlsFree
SetFilePointer
GetFileAttributesW
CompareStringW
GetOEMCP
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
VirtualAlloc
GetConsoleCP
CreateFileA
GetFileSize
EncodePointer
LoadLibraryA
GetLocaleInfoW
UnmapViewOfFile
GetExitCodeProcess
CreateProcessW

user32

TranslateMessage
DefWindowProcW
PostQuitMessage
CreateWindowExW
SetWindowLongW
GetDlgItem
GetWindowRect
PostMessageW
SendMessageW
IsWindow
LoadCursorW
EndDialog
SetTimer
SetFocus
SetForegroundWindow
GetSysColor
PeekMessageW
SetCursor
KillTimer
InvalidateRect
RegisterClassW
EnableMenuItem
GetWindow
UpdateWindow
SystemParametersInfoW
MessageBoxA

Sections

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f51c2d3ecbe648af9f3b02ef826f9fc

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB