04b10d4a78acdddbc4bc7a51fe74ae26

General

Target

04b10d4a78acdddbc4bc7a51fe74ae26
Size

132KB
MD5

04b10d4a78acdddbc4bc7a51fe74ae26
SHA1

792677040d87d556a351cf3b6097391fdf7a5968
SHA256

e27577e781d5fabc10c8f3782f4097cb2f29bb2f8ab63fb59846e154ad049380
SHA512

1a22715bc9ddd9071037b540046ea7ddfd18449bb8ff9eb5016e80ab54e9b228aebfd5fa71edb670b8448d542c0b2eacde57818f2f6dee54e63eb5ac9038fab8
SSDEEP

1536:jD05bI3h83qdSPa7lq9h2ypbtq2FMvLGNW/DyA1nD8G96+aokrk5bqJF98RC:MbIR83qffetMvLH/HD9PaVuWww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b10d4a78acdddbc4bc7a51fe74ae26

Files

04b10d4a78acdddbc4bc7a51fe74ae26
.exe windows:4 windows x86 arch:x86

b767e32f70588116ff6833a276f1339d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

fread
perror
malloc
fclose
strncmp
free
fopen
strspn
strcspn
fgets
fwrite
printf
getenv
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_iob
fprintf
sprintf
strchr
strrchr
_exit
_strdup
_stat

kernel32

QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mhjpatr
Size: 84KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ailqsyb
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ehzpzrt
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b767e32f70588116ff6833a276f1339d

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 108KB - Virtual size: 108KB

mhjpatr Size: 84KB - Virtual size: 112KB

ailqsyb Size: - Virtual size: 32KB

ehzpzrt Size: 4KB - Virtual size: 72KB

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 108KB - Virtual size: 108KB

mhjpatr
Size: 84KB - Virtual size: 112KB

ailqsyb
Size: - Virtual size: 32KB

ehzpzrt
Size: 4KB - Virtual size: 72KB