1938f9d270c254a5bf2ea264b64f62b2

General

Target

1938f9d270c254a5bf2ea264b64f62b2
Size

192KB
MD5

1938f9d270c254a5bf2ea264b64f62b2
SHA1

48d64fc0beffd7ad83c64d4043a21b84d3a25f07
SHA256

c25864d820d5e8bef442fd2a5f440fd03c665ef620d91a5d2260c9f25e40642b
SHA512

87237b4fc1836ca9c9099a3602d438de23d800b683126769cf8a550d7ed3e36bea2b4182a98fe15de3f0a079f5937529d3cf12c1ff0eca98e7f8fdcf0f08d67b
SSDEEP

3072:98rBP3kuaV79x2ESmzYYiXf9qbn3UJzEx/ZbnHGf0iJNH/q2hB:mnaV79UEopXgEJihW0iHTh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1938f9d270c254a5bf2ea264b64f62b2

Files

1938f9d270c254a5bf2ea264b64f62b2
.exe windows:4 windows x86 arch:x86

89efc970b7be20d8fb6142b948808cba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
DeleteFileA
SetFileAttributesA
CloseHandle
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
GetTickCount
lstrcatA
GetSystemDirectoryA
MultiByteToWideChar
GetWindowsDirectoryA
HeapFree
Sleep
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
ExitProcess
SetEnvironmentVariableA
GetTempPathA
GetCurrentDirectoryA
MoveFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
FindNextFileA
FindFirstFileA
lstrcmpiA
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetShortPathNameA
ExpandEnvironmentStringsA
OpenEventA
SetUnhandledExceptionFilter
GetCommandLineA
WideCharToMultiByte
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

user32

CharNextA
wsprintfA

msvcrt

strcpy
rand
srand
_ftol
toupper
tolower
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
memset
strcat
strncat
strchr
strcmp
__CxxFrameHandler
_CxxThrowException
strncpy
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
malloc
free
strlen
_itoa
_strlwr
_strnicmp
_stricmp

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89efc970b7be20d8fb6142b948808cba

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 160KB - Virtual size: 162KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 160KB - Virtual size: 162KB

.rsrc
Size: 4KB - Virtual size: 3KB