337425067dee60934310a94ce56cc50f

General

Target

337425067dee60934310a94ce56cc50f
Size

185KB
MD5

337425067dee60934310a94ce56cc50f
SHA1

3781246ff6ec42c75f6884db8a33045a10736dd2
SHA256

8193cfbaf1cd5f45238f99307d0cf197c7ac1958dada10237cbd09e55cf261fb
SHA512

00b7c3f3f9530e93ede861dc570fe5104849ac8d8af95fb78fd0544728f7537ee15f4593894eb87b29be5aa0f34a584ec7640ab2e1578be48a6251f0957a9ad4
SSDEEP

3072:9aeiQv2dbSBlzrRkqnlTkYljv1yTm6mBgQZbsI9nVhJdwix7AjU8:8hQ2V8dRdJkQNyTMJ9j3xE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337425067dee60934310a94ce56cc50f

Files

337425067dee60934310a94ce56cc50f
.exe windows:4 windows x86 arch:x86

77eea4e77f915e99f4367031f9a845dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
FindFirstFileA
SetUnhandledExceptionFilter
IsBadReadPtr
GetStringTypeA
GetStringTypeW
GetOEMCP
UnhandledExceptionFilter
AddAtomA
Sleep
GetDiskFreeSpaceA
FreeLibrary
lstrcmpA
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
CloseHandle
FlushFileBuffers
GetProcAddress
EnterCriticalSection
InitializeCriticalSection
ReadFile
EnumResourceNamesW
WideCharToMultiByte
FreeEnvironmentStringsA
GetModuleHandleA
DeleteCriticalSection
LoadLibraryA
LeaveCriticalSection
GetStartupInfoA
GetEnvironmentStrings
GetTickCount
lstrcpyA
GetLastError
GetFullPathNameA
LCMapStringA
lstrcatA
lstrcpynA
GetCurrentThreadId
lstrlenW
WriteFile
lstrcmpiA
LCMapStringW
lstrlenA
GetCPInfo
IsBadCodePtr
MulDiv
GetThreadLocale
CreateFileA
MultiByteToWideChar
VirtualProtect
GetFileAttributesA
RaiseException

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 98KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77eea4e77f915e99f4367031f9a845dd

Headers

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 98KB - Virtual size: 245KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 84KB - Virtual size: 83KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 98KB - Virtual size: 245KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 84KB - Virtual size: 83KB

.rsrc
Size: 512B - Virtual size: 4KB