84474c79ba9dafc757beb9253511ba1365250e80e0a8cab88aacf2e4c9a8a195

General

Target

84474c79ba9dafc757beb9253511ba1365250e80e0a8cab88aacf2e4c9a8a195
Size

11KB
MD5

70678c6528aee58c1073a31f52b1c3e1
SHA1

eb6f7c8df3fde4c80da54e2bcf7983cd913ec949
SHA256

84474c79ba9dafc757beb9253511ba1365250e80e0a8cab88aacf2e4c9a8a195
SHA512

926e8c61f2f440b39b4f559014bc37ab4a015d1f5edfe5825c62360c2de02d79971e92bf617dcf7d65b0d9474d09fc3ff2c84a29c785908e2b10be670590a4d7
SSDEEP

192:rFxEdjqT1Vb9KkuOY+DlEZ/9QgyVK2ZylND8Oo2KTVEI:rMMT1J95YIK/WiMIND6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84474c79ba9dafc757beb9253511ba1365250e80e0a8cab88aacf2e4c9a8a195

Files

84474c79ba9dafc757beb9253511ba1365250e80e0a8cab88aacf2e4c9a8a195
.exe windows:6 windows x86 arch:x86

d914cf794f8f2bc8093e7246ff4ec460

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

vcruntime140d

_except_handler4_common
memset

ucrtbased

_crt_atexit
_initialize_onexit_table
_controlfp_s
terminate
_register_onexit_function
__p__commode
_set_new_mode
_configthreadlocale
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_set_fmode
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d914cf794f8f2bc8093e7246ff4ec460

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140d

ucrtbased

kernel32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 956B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 408B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 956B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 408B