3623fd4c2e5ec0d2b1357b30fa067c34

General

Target

3623fd4c2e5ec0d2b1357b30fa067c34
Size

52KB
MD5

3623fd4c2e5ec0d2b1357b30fa067c34
SHA1

6bf3a0bee00b9ba4e081d369fdaf9910a561578b
SHA256

e37791b5fc5036c7993f6e8ebf950772047358aad3ea770e63041cf106f22a37
SHA512

2049e3619f75417143323820b5335c189fa9503997f65d5a3536b28026f94af86f955c60785369d0dcc4e6939a370a3b8d71de1c61db3fdb934dcacb4f163169
SSDEEP

768:k2VzHouKETGVS2BGb/1bVfY+W/7FgKvkutGyyQHZljm1WeQ/9ddy:fV0uKEC42q/p9VW/7rvkq3XlAWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3623fd4c2e5ec0d2b1357b30fa067c34

Files

3623fd4c2e5ec0d2b1357b30fa067c34
.exe windows:4 windows x86 arch:x86

b7cb600451d242f4af706220f0dceb7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualProtect
ReadFile
SetEndOfFile
GetCPInfo
GetOEMCP
GetACP
CreateFileA
SetFilePointer
WideCharToMultiByte
HeapSize
GetVersionExW
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
GetLastError
CloseHandle
WriteFile
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetSystemInfo

user32

CreateDialogParamW
ShowWindow
UpdateWindow
GetMessageW
IsWindow
IsDialogMessageW
TranslateMessage
DispatchMessageW
GetDlgItemTextW
DestroyWindow
LoadIconW
SendMessageW
PostQuitMessage
MessageBoxW

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7cb600451d242f4af706220f0dceb7c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 8KB - Virtual size: 6KB