a105364ccfa73e453f2fe935259148d6

General

Target

a105364ccfa73e453f2fe935259148d6
Size

3.4MB
MD5

a105364ccfa73e453f2fe935259148d6
SHA1

5664a5f16cea578b215aa4d7c2445a8178c16da0
SHA256

7696433a0339fee9345b818ae542153ccbd7376ee6b979ce644597dfcf638a06
SHA512

ba0a2455ba05a5625ac61c3cba42808ccdebe6ce0a31a4ba5758e3cb89f9ac941b3c8d164ff6349c54a6d0dbf16f658c037e24cb7add0497cadbd413a3dd7bbc
SSDEEP

98304:a3h4HZtzi6hOcVFdMf1T6gzXJh7GhcZLC/:aqZtzdNYJlZLC/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a105364ccfa73e453f2fe935259148d6

Files

a105364ccfa73e453f2fe935259148d6
.exe windows:4 windows x86 arch:x86

e569b40cc3c97f8eaffc9b5a782c5c77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetProcAddress
CloseHandle
DeleteCriticalSection
EnterCriticalSection
WriteFile
WaitForSingleObject
GetProcessHeap
CreateFileW
GetModuleFileNameW
GetStdHandle
IsDebuggerPresent
FindClose
RaiseException
GetACP
GetModuleHandleA
InitializeCriticalSection
GetConsoleMode
FlushFileBuffers
TlsSetValue
CreateEventW
HeapSetInformation
WriteConsoleW
LoadLibraryW
CreateThread
SetFilePointer
GetFileAttributesW
CompareStringW
GetStringTypeW
GetModuleFileNameA
GetOEMCP
IsProcessorFeaturePresent
FindFirstFileW
VirtualAlloc
GetCommandLineA
ResetEvent
GetVersionExW
CreateFileA
OutputDebugStringW
GetFileSize
lstrlenW
UnmapViewOfFile
ExpandEnvironmentStringsW
CreateProcessW

user32

TranslateMessage
LoadStringW
DispatchMessageW
ShowWindow
DestroyWindow
MessageBoxW
SetWindowLongW
GetWindowLongW
GetMessageW
GetDlgItem
GetSystemMetrics
GetWindowRect
SendMessageW
EnableWindow
IsWindow
GetParent
EndDialog
SetWindowTextW
LoadIconW
SetFocus
SetForegroundWindow
GetSysColor
ScreenToClient
SetCursor
KillTimer
RegisterClassW
EnableMenuItem
GetKeyState
MessageBoxA

Sections

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e569b40cc3c97f8eaffc9b5a782c5c77

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB