336e17a3921c22c7424fbbaa078d9922

General

Target

336e17a3921c22c7424fbbaa078d9922
Size

184KB
MD5

336e17a3921c22c7424fbbaa078d9922
SHA1

a20cf38c28d63705d11d79e48c8f647d44e75339
SHA256

8423aa285eb7d0f2e6b310b85539c665c207044485b129ca0a876d3f9f9bb105
SHA512

988e24c182980d1ad817d8b40a54ed7acb3ccd643131a1d1563f3a6a03076ba227c1f8118d4f5f549f9c951b4a780aa8f1b4bfd8451c8c8e670fff6a349143d3
SSDEEP

3072:41VnnJPw5f0iKQyNj/yzqXnBNe4s0e48BeT1Fov063EpDZzykrg:wJPw5c3N7SGhuqFov0Bl+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
336e17a3921c22c7424fbbaa078d9922

Files

336e17a3921c22c7424fbbaa078d9922
.exe windows:4 windows x86 arch:x86

0ac5042917781b451907161eced48670

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
asin
wcschr
memset
strcmp
time
wcsncmp

kernel32

GetTickCount
lstrcpynA
MoveFileA
ExitThread
WaitForSingleObject
GetCurrentProcessId
LoadLibraryExA
VirtualAllocEx
LocalAlloc
GetCommandLineW
IsBadHugeReadPtr
ExitProcess
lstrlenA
lstrcmpiA
GetStdHandle
GetLocalTime
ReadFile
GetCommandLineA
GlobalAddAtomA
GetDateFormatA
GetFileType
FormatMessageA
GetStartupInfoA
GetFullPathNameA
MulDiv
GetModuleHandleW
GetACP
GetThreadLocale
GetFileAttributesA
LocalFree
SetThreadLocale
WideCharToMultiByte
VirtualFree
GetCurrentThreadId
SetFilePointer
GetProcAddress
HeapDestroy
GetModuleHandleA
GetCurrentThread
GlobalAlloc
LoadResource
DeleteCriticalSection
FreeResource
GetVersion
LoadLibraryA
LocalReAlloc
HeapAlloc
GetStringTypeA
SetErrorMode
IsBadReadPtr
ResetEvent
CreateEventA
VirtualQuery
LockResource

oleaut32

SysFreeString
SysStringLen
OleLoadPicture
VariantCopyInd

Sections

CODE
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ac5042917781b451907161eced48670

Headers

File Characteristics

Imports

msvcrt

kernel32

oleaut32

Sections

CODE Size: 88KB - Virtual size: 84KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 424B

.bss Size: 4KB - Virtual size: 444B

.gdata Size: 64KB - Virtual size: 61KB

.rsrc Size: 8KB - Virtual size: 7KB

CODE
Size: 88KB - Virtual size: 84KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 424B

.bss
Size: 4KB - Virtual size: 444B

.gdata
Size: 64KB - Virtual size: 61KB

.rsrc
Size: 8KB - Virtual size: 7KB