33732489bd27adb694e6f5c7d786c3a0

General

Target

33732489bd27adb694e6f5c7d786c3a0
Size

337KB
MD5

33732489bd27adb694e6f5c7d786c3a0
SHA1

d0adf3d173cc2a08b7e2aab20b6647da4ff4015d
SHA256

54fdaf81bbfc5a829f88aeb0b56063f20cbad4bd394bd3d9e073007c188dd670
SHA512

e914df783f0d8ee52084ee58b57f35b0f0ba4927cee6eb2248ad27ab3f7f4cef2eee60688888b155af6c9922696cfe393ac84fed854ab1c61de7b953e971b455
SSDEEP

6144:AF6N7JyhK2cqUaHtWssUHaVhHU9Bn0Y8cMomq27iqd5aSvZQkB:AFIy0faN36PUoY8ckzJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33732489bd27adb694e6f5c7d786c3a0

Files

33732489bd27adb694e6f5c7d786c3a0
.exe windows:4 windows x86 arch:x86

602027ab49a6504d3b57a70ad9ace780

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
GetLastError
OpenMutexA
CreateMutexA
CloseHandle
VirtualAlloc
ResumeThread
CreateThread
Sleep
GetProcAddress
VirtualFree
GetModuleHandleA
ExitProcess
GlobalAlloc
SuspendThread
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
VirtualQuery

user32

SetTimer
GetDC
LoadCursorA
GetCursorPos
GetDesktopWindow

msvfw32

DrawDibChangePalette

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

602027ab49a6504d3b57a70ad9ace780

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 252KB - Virtual size: 251KB

.rsrc Size: 53KB - Virtual size: 373KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 252KB - Virtual size: 251KB

.rsrc
Size: 53KB - Virtual size: 373KB