330796a0d11fe275dce60f836d16e607

General

Target

330796a0d11fe275dce60f836d16e607
Size

100KB
MD5

330796a0d11fe275dce60f836d16e607
SHA1

03fa32eef123e64ec08a2059d35cd9eabf32b262
SHA256

a1e2c7927642043662b81daa5af078cfb3f29bccb48a16b1cb01cfdb49e9ac55
SHA512

6f800856c6e0877f92ac814900018f836d1b85e965ce191a7c40d253e859f2db1cc5917912cf10a2cecc35e32a36b0675a6d7ae532c9d1432b89255828064b58
SSDEEP

1536:T8Mtsa9WnGmrxJ8lfceSRNFEGCw6HNZd0zkPUgedkh+gLvH7YTl:TwWWGmrxJ8lfc9FEGCbtYTFc+ivml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
330796a0d11fe275dce60f836d16e607

Files

330796a0d11fe275dce60f836d16e607
.exe windows:5 windows x86 arch:x86

ecc7da4e4021bb33b064ecc22ef77f31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
MapViewOfFileEx
CreateFileMappingA
CreateFileA
DeleteFileA
SetFileAttributesA
LocalFree
LocalAlloc
WriteFile
SetFilePointer
FreeLibrary
LoadLibraryA
GetProcAddress
GetLastError
GetFileAttributesA
GetComputerNameA
GetSystemDirectoryA
GetVersionExA
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SetLastError
LoadResource
CloseHandle
GetModuleFileNameA
UnmapViewOfFile
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetCPInfo
SetStdHandle
GetOEMCP
GetACP
GetSystemInfo
VirtualProtect
Sleep
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InterlockedExchange
VirtualQuery
MultiByteToWideChar
LCMapStringA
LCMapStringW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA

user32

LoadStringA

ntdll

RtlTimeToTimeFields
NtQuerySystemTime
RtlSystemTimeToLocalTime
RtlUnwind

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecc7da4e4021bb33b064ecc22ef77f31

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

ntdll

version

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 66KB - Virtual size: 73KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 66KB - Virtual size: 73KB

.rsrc
Size: 3KB - Virtual size: 2KB