3f06cc0123ac7630f61c09f9ed75d2f1

General

Target

3f06cc0123ac7630f61c09f9ed75d2f1
Size

329KB
MD5

3f06cc0123ac7630f61c09f9ed75d2f1
SHA1

23cab33d73f9a7381633f4cbee0325aef0073a36
SHA256

905895dbd7d950b64cbfe07273d4fb515a65f27014d92415fb32df43a891a10f
SHA512

daef8357b52970a1a6e49759b1dacf2f24e0972ad22f34f00df089c4cecabde510d22cb60dfb28afc8975fb08669e798ee9fc2822a7d10eb2ad0abf5687e76f7
SSDEEP

6144:3f0B/6fhFb7h5yYAy6YKS55pWaYdPpsZYX8CNeXafhiEyC86:3bZFvh5QRST8aCq8eXSv86

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f06cc0123ac7630f61c09f9ed75d2f1

Files

3f06cc0123ac7630f61c09f9ed75d2f1
.exe windows:61495 windows x86 arch:x86

196d60bb9701e49f7cd6d9aa919de1a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SetFilePointer
ExitProcess
GetModuleHandleW
DeleteCriticalSection
lstrcpyW
EnterCriticalSection
WriteFile
DeleteCriticalSection
GetModuleHandleW
CreateFileW
GetStartupInfoW
DeleteCriticalSection
LocalFree
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
SetEvent
VirtualAlloc
VirtualAlloc
VirtualFree
InterlockedDecrement
GetProcAddress
HeapAlloc
HeapDestroy
InterlockedIncrement
FreeLibrary
GetLastError
GetModuleHandleA
LocalFree
VirtualAlloc
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
DeleteCriticalSection
CloseHandle
LoadLibraryW
LoadLibraryA
GetLastError
InitializeCriticalSection
MultiByteToWideChar
GetModuleFileNameA
GetStartupInfoA
FreeLibrary
GetVersionExA
InterlockedIncrement
SetLastError
LocalFree

user32

ShowWindow
CheckDlgButton
DefWindowProcW
BeginPaint
GetMessageW
GetDlgItem
SetRect
MapWindowPoints
DispatchMessageA
MessageBoxA
UpdateWindow
GetMessageW
CreateDialogParamW
GetKeyState
MessageBoxW
CallWindowProcW
GetCursorPos
EndDialog
GetSubMenu
GetClientRect
DispatchMessageA
RegisterClassExW
GetFocus
DispatchMessageW
LoadImageW
IsWindowVisible
RegisterClassW
UpdateWindow
CreateDialogParamW
WinHelpW
DestroyIcon
PeekMessageW
CopyRect

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

196d60bb9701e49f7cd6d9aa919de1a6

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 75KB - Virtual size: 92KB

.rdata Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 75KB - Virtual size: 92KB

.rdata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB