10954e6a842f7fc233d2e4c159dd9de8

General

Target

10954e6a842f7fc233d2e4c159dd9de8
Size

59KB
MD5

10954e6a842f7fc233d2e4c159dd9de8
SHA1

e3a8016748932ebb8416ad562a763b2886f127d8
SHA256

7bf4209bd3d7973b5061883db3f5aaf286a61f630406680ec0aedca6e04bf175
SHA512

eab8a4d76f23a8a0a799f430e2211aa43ebf9a3f9e8cd710bf8e6d811086624ab61e43ca2ff98d59fcfac898c40e98a57a48e774b88e5c56270ebc2df6d26797
SSDEEP

1536:UrJFr8sK23DxXTV2AkMQ96UZzX/2DBmthpahU0+v:UrJesK2t8AkMQXZjABI4hU0+v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10954e6a842f7fc233d2e4c159dd9de8

Files

10954e6a842f7fc233d2e4c159dd9de8
.exe windows:4 windows x86 arch:x86

882422901c0b9f031ea693bcab9d245f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
FindResourceA
SetThreadContext
LoadResource
SizeofResource
CreateProcessA
VirtualAllocEx
LockResource
GetModuleFileNameA
WriteProcessMemory
ResumeThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

msvcr80

_adjust_fdiv
__setusermatherr
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
malloc
free
__p__commode
memcpy
memset

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

882422901c0b9f031ea693bcab9d245f

Headers

File Characteristics

Imports

kernel32

msvcr80

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 53KB - Virtual size: 77KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 53KB - Virtual size: 77KB