282689e46ed1a2e21d5a571079cd405b

Sharing

Copy URL

Twitter E-mail

General

Target

282689e46ed1a2e21d5a571079cd405b
Size

432KB
MD5

282689e46ed1a2e21d5a571079cd405b
SHA1

c6346b93509ba57f0034a008b1fcdaa6458bf2b5
SHA256

cab74aaef8d6649ed0035367e61effd26b948dd68c9ebff7d44f281846490b86
SHA512

7fe4641e3f802b3e7f5ec4d939021b323b3ce0634987eb5aa4ac0cf8e6d707c10ffa53087b04f50d337b63b697b674fadc16536b22811bc19b97a8753c631027
SSDEEP

6144:c34OtN933Y973HlLraWOzfgLbli8g7GjkKKceOI7zkuT2DnXP:m4y3S7OCZi8gqjkK5eOGzkfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
282689e46ed1a2e21d5a571079cd405b

Files

282689e46ed1a2e21d5a571079cd405b
.exe windows:4 windows x86 arch:x86

5aaa069ef0880839b9b00615939e6cad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
SetFileAttributesA
GetFileAttributesA
WriteFile
GetVersionExA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetTickCount
TerminateProcess
HeapFree
HeapAlloc
GetCommandLineA
LockResource
FreeResource
LoadResource
SizeofResource
FindResourceA
lstrlenW
GetVolumeInformationA
GetCurrentDirectoryA
SetFilePointer
LocalFree
CreateToolhelp32Snapshot
Process32First
Process32Next
RaiseException
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
FileTimeToSystemTime
MultiByteToWideChar
GetLastError
GetSystemDirectoryA
IsBadWritePtr
ExitProcess
GetCurrentProcessId
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetTempPathA
LoadLibraryExA
Sleep
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
HeapReAlloc
RtlUnwind

user32

wsprintfA

shell32

SHChangeNotify
ShellExecuteExA

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree
OleRun

oleaut32

VariantClear

netapi32

Netbios

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5aaa069ef0880839b9b00615939e6cad

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

netapi32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 364KB - Virtual size: 360KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 364KB - Virtual size: 360KB