4eccff823f3474cbe1adefd09f97092c

General

Target

4eccff823f3474cbe1adefd09f97092c
Size

104KB
MD5

4eccff823f3474cbe1adefd09f97092c
SHA1

33a718a2a9ffa02850e3223b7d372924b3bc58f3
SHA256

ecafdb3396c5e99c8736e92454c6b122a5d0c98ea2d4683673c4f4875b2fbef8
SHA512

64aaaab680b86953e5e87dc6d706d72b0f4b8800ba09778d10e161ab4e5634a24bee55b4da3ea4e4cea12074781c2cd1c19dfad5f8991f3230f24eb5ebbe8bba
SSDEEP

3072:OSrVMtaCy+s0SlmBCsr0M+tUrqzkKd11KnwS8UGTBftou7AwmY789:lBMtaCy+s0SlmBCsr0M+yewwZUGTBloP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eccff823f3474cbe1adefd09f97092c

Files

4eccff823f3474cbe1adefd09f97092c
.exe windows:4 windows x86 arch:x86

cc156485aad18f0e45c93ad92da5fc7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
GetSystemDirectoryA
Sleep
DeleteFileA
SetFileAttributesA
MoveFileA
FreeResource
CloseHandle
lstrlenA
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
lstrcpyA
lstrcmpiA
SetLastError
ReadFile
SetFilePointer
GetModuleFileNameA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
WritePrivateProfileStringA
GetFullPathNameA
InterlockedExchange
LocalAlloc
FreeLibrary
LoadLibraryA
GetStartupInfoA
RaiseException

msvcrt

memset
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
strstr
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
strlen
malloc
realloc
_except_handler3

netapi32

NetApiBufferFree
NetUserGetLocalGroups

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc156485aad18f0e45c93ad92da5fc7e

Headers

File Characteristics

Imports

kernel32

msvcrt

netapi32

Sections

.text Size: 12KB - Virtual size: 12KB

.rsrc Size: 91KB - Virtual size: 90KB

.text
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 91KB - Virtual size: 90KB