23d226af6475091189ed8e2671404e82

General

Target

23d226af6475091189ed8e2671404e82
Size

252KB
MD5

23d226af6475091189ed8e2671404e82
SHA1

c4545f0a87ba74461d1754fbcd6c1fa5af7e8c45
SHA256

4f4b0c83dd62e39b7db5ab85d324ea10b7104358eb94941bad5cc9432798f287
SHA512

5d8f1c692f194e35627e47960a54daefdd78da543aae692ee0454cc8430f51b8e137c27ff333026623d1c8a1eb98697aa146ddff360bb9a1f31b50f81a6e6456
SSDEEP

6144:qE7oIBOHkLZc0DWhh2b7xlMIZ/lARCZNJOoT:f0QGKZmhOxlPOoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23d226af6475091189ed8e2671404e82

Files

23d226af6475091189ed8e2671404e82
.exe windows:4 windows x86 arch:x86

58bbd3178df0d077e6707c1491b7b952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetEnvironmentStringsW
GetPriorityClass
GetCurrentProcessId
GetEnvironmentStrings
GetVersionExA
GetCommandLineA
GetTickCount
IsDebuggerPresent
GetModuleHandleW
lstrlenA
GetCurrentThread
VirtualAlloc
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW

secur32

ApplyControlToken

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 216KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58bbd3178df0d077e6707c1491b7b952

Headers

File Characteristics

Imports

kernel32

secur32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 216KB - Virtual size: 256KB

BSS Size: 4KB - Virtual size: 988B

.rsrc Size: 4KB - Virtual size: 144B

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 216KB - Virtual size: 256KB

BSS
Size: 4KB - Virtual size: 988B

.rsrc
Size: 4KB - Virtual size: 144B