3d83298d02169dd0e315b9971639ee5a

Sharing

Copy URL

Twitter E-mail

General

Target

3d83298d02169dd0e315b9971639ee5a
Size

29KB
MD5

3d83298d02169dd0e315b9971639ee5a
SHA1

c624a58cee0ecf684b8d3bcf30123f1f2a46e38b
SHA256

bb16ee91e726a4d99e79e1815f539bbac6fc5195a0ef2b9f2d25d5df8ab11148
SHA512

23f0af5429788d41d7d0ecc7a24fe739f0d826b1ff16c6a97959cdaaafe10722f454cd9405e562191bd3625278eb941fca92e6286a79612b893df62752c10519
SSDEEP

768:2scWXsXuqG7LoqyTDn21z/XVLbci+5jAgY:2scWXsX7soLTDn8bXnbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d83298d02169dd0e315b9971639ee5a

Files

3d83298d02169dd0e315b9971639ee5a
.exe windows:4 windows x86 arch:x86

0146ef0b4dc6cca080ccd6c792210393

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetVersionExA
GetStringTypeW
ExitProcess
CreateDirectoryA
GetStdHandle
GetTempPathA
HeapSize
DeleteCriticalSection
FindClose
ReadFile
GetDiskFreeSpaceA
DeleteFileA
GetConsoleMode
GetCommandLineA
SetStdHandle
WriteFile
CreateFileA
GetCPInfo
GetFileAttributesA
GetOEMCP
GetCurrentThreadId
HeapFree
WaitForSingleObject
InitializeCriticalSection
GetCurrentProcess
LCMapStringW
SetFilePointer
CreateProcessA
IsValidCodePage
GetStringTypeA
GetFileType
SetFileAttributesA
GetModuleFileNameA
CreateThread
CloseHandle
FlushFileBuffers
FindNextFileA
GetACP
HeapAlloc
GetConsoleOutputCP
MoveFileA
GetModuleHandleA
LCMapStringA
SetHandleCount
GetConsoleCP
GetExitCodeProcess
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetLocaleInfoA
WriteConsoleA
GetProcAddress
FindFirstFileA
GetFileSize
EnterCriticalSection
GetProcessHeap
GetLastError
DebugActiveProcess
RaiseException
TerminateProcess
InterlockedDecrement
WriteConsoleW
SetUnhandledExceptionFilter
SetFileTime
LoadLibraryA
GetStartupInfoA
RemoveDirectoryA
GetExitCodeThread
IsDebuggerPresent
CopyFileA
SetEndOfFile
GetCurrentProcessId
LeaveCriticalSection

ole32

OleCreateEx

advapi32

LookupAccountNameW
RegCloseKey
RegCreateKeyExA
RegSetValueExA

user32

TranslateMessage
PostMessageA
SendMessageA
MessageBoxA
DispatchMessageA
ShowWindow
GetMessageA
EndDialog
CreateWindowExA
GetDlgItem

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 13KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0146ef0b4dc6cca080ccd6c792210393

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

advapi32

user32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 7KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 1KB

.edata Size: 13KB - Virtual size: 39KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 7KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 1KB

.edata
Size: 13KB - Virtual size: 39KB