0dd91af8570119e5616b99545283474f

General

Target

0dd91af8570119e5616b99545283474f
Size

172KB
MD5

0dd91af8570119e5616b99545283474f
SHA1

21cf715719482960bfee48dc86695d781eba71da
SHA256

49ae89a96860a5b8362795c400c79f882763202d7242cea38aadcd75c2b5a748
SHA512

fb49269991030b4ea0b3d915c68bbff5a5b9b999f84eb5d00a0136324c137dd0292c38aa225122ec32698f958b120a04e154f3c9e137617eac4f91b3cb59929a
SSDEEP

3072:P7NfWcr+8MftHETTxVEZZUl8KnKl0zuOz0x8ry492PAa9FdDaO:P5W4+8MfqTT/EBZOzuOz0x8me2PAa9/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd91af8570119e5616b99545283474f

Files

0dd91af8570119e5616b99545283474f
.exe windows:4 windows x86 arch:x86

a10d24789e3f52697c4a84f4cfe69da2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
HeapFree
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
LCMapStringA
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
HeapAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetFileAttributesA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
WriteFile
CloseHandle
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
InterlockedExchange
SetStdHandle
CreateFileA
GetACP
GetOEMCP
GetLocaleInfoW
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a10d24789e3f52697c4a84f4cfe69da2

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 10KB

.rrdata Size: 68KB - Virtual size: 68KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 10KB

.rrdata
Size: 68KB - Virtual size: 68KB