04d36a830a7a8d03a70e4f8264fdd294

General

Target

04d36a830a7a8d03a70e4f8264fdd294
Size

84KB
MD5

04d36a830a7a8d03a70e4f8264fdd294
SHA1

c615e2b606a5bff269c2a4bf8dcc35e324d4646e
SHA256

e5af47c398e0ab020c87a2956b2fa6e2ff24c424b3e773d2ecf4f497950bcc0c
SHA512

99256bce3c044294eb9b3590d73f087ed83924083cf0c181ecdb552fb1ecd874b17d4fddd4808db870bbf4b8457b0ec29d83e0be2988458d062fbe4cccf7fbae
SSDEEP

768:dIcAeeQ1J3t9OW/PhbKcRQrs6kzmlHZXDVs22elOe4s3yHpj6c5Q:dmeeq087F6HFWiSs3yHpj6mQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d36a830a7a8d03a70e4f8264fdd294

Files

04d36a830a7a8d03a70e4f8264fdd294
.exe windows:4 windows x86 arch:x86

ebf3e39ef6bda5de4479064c5f7aa16e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
LoadLibraryA
FreeLibrary
SetFileAttributesA
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GetSystemDirectoryA
GlobalMemoryStatusEx
ExitThread
Sleep
TerminateProcess
CreateProcessA
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
CloseHandle

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebf3e39ef6bda5de4479064c5f7aa16e

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 12KB - Virtual size: 12KB