597910e610db9329cdf81f34cf5393e5

General

Target

597910e610db9329cdf81f34cf5393e5
Size

3.4MB
MD5

597910e610db9329cdf81f34cf5393e5
SHA1

f31c96fbc826dc3766bbbda0899b0008c83f62d1
SHA256

57fdc9590b8e343d2106ba56f659ab453e54dc2b397923d72a0370bdc746a82a
SHA512

539f86601399c22ab04091bcceca6fe2dafc3bede279b76b6c92097fca2953d60d33a6d8419356316353a1fd2753633ff0ed1817cabc90612c4447ef0437da93
SSDEEP

98304:eeiogSILOXVZf7YuL4YdcO7KQiNl9oghGw1W:eefQWrrdT+TNl987

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
597910e610db9329cdf81f34cf5393e5

Files

597910e610db9329cdf81f34cf5393e5
.exe windows:4 windows x86 arch:x86

a72af8da34f9c50aa85cae61635c8db6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetProcAddress
CloseHandle
TerminateProcess
UnhandledExceptionFilter
Sleep
FreeLibrary
WideCharToMultiByte
HeapAlloc
LocalFree
EnterCriticalSection
GetProcessHeap
GetModuleFileNameW
GetStdHandle
GetCommandLineW
SetEvent
FormatMessageW
TlsGetValue
CreateEventW
HeapSize
WriteConsoleW
GetCPInfo
SetFilePointer
GetStringTypeW
GetOEMCP
GetEnvironmentStringsW
IsValidCodePage
DeleteFileW
LocalAlloc
GetCommandLineA
DecodePointer
ResetEvent
CreateFileA
GetFileSize
EncodePointer
VirtualFree
GetModuleHandleExW
CreateDirectoryW
CreateProcessW

user32

TranslateMessage
LoadStringW
DispatchMessageW
ReleaseDC
DefWindowProcW
PostQuitMessage
SetWindowLongW
GetWindowLongW
GetDC
GetWindowRect
PostMessageW
GetClientRect
SetWindowPos
IsWindow
LoadCursorW
EndDialog
LoadIconW
SetFocus
SetForegroundWindow
GetSysColor
PeekMessageW
EndPaint
KillTimer
InvalidateRect
RegisterClassW
EnableMenuItem
GetWindow
GetWindowTextW
GetKeyState
MessageBoxA
ClientToScreen

Sections

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a72af8da34f9c50aa85cae61635c8db6

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: - Virtual size: 612KB

.text Size: 6KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: - Virtual size: 612KB

.text
Size: 6KB - Virtual size: 6KB