fd582ce971e966dc3ccf3a2ecf9acc3a

General

Target

fd582ce971e966dc3ccf3a2ecf9acc3a
Size

105KB
MD5

fd582ce971e966dc3ccf3a2ecf9acc3a
SHA1

76fe5d7ebcaeb1a81ca8d29a562f2983820461fc
SHA256

80c382e0789fd3974fc871c2e366b318aa66f02d114ed92f17ae34e9fa209608
SHA512

5e02c1e629f534c9c5f5f8f6e90fd08dff025aa364a582fa26775810199b51be1bc0c7aa4b6a0f9b3035940d9cbdae80f830ef9535afd9c33514ef4f4b6ab875
SSDEEP

1536:g/oRVvsFhS6H0NxduuFbIHlErFjC7dVpJtIedWsdvoX+UZh2/JM7c1cnE4s9T9lw:J2Mxd0ErFmppzu1gM7QcEv9lvbsaAu8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd582ce971e966dc3ccf3a2ecf9acc3a

Files

fd582ce971e966dc3ccf3a2ecf9acc3a
.exe windows:5 windows x86 arch:x86

0cdad516b139a0d740cd7e590ed3c848

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
OutputDebugStringA
OpenProcess
FreeEnvironmentStringsW
HeapFree
SetFilePointer
GetPrivateProfileStringW
CreateFileA
CompareStringW
SetErrorMode
GetEnvironmentStringsW
WriteConsoleA
VirtualAlloc
InterlockedIncrement
FreeResource
GetDiskFreeSpaceA
CreateMutexA
GetSystemTime
InitializeCriticalSectionAndSpinCount
LockResource
LoadLibraryA
SystemTimeToFileTime
GetTempPathW
QueryPerformanceFrequency
ExitProcess
DebugBreak
LCMapStringW
GetWindowsDirectoryA
OpenEventW
LoadResource

msvcrt

??3@YAXPAX@Z
_lock
__dllonexit
strncmp
exit
__p__commode
__getmainargs
__set_app_type
?terminate@@YAXXZ
__CxxFrameHandler

user32

PostMessageA
GetWindowDC
MessageBeep
EndDialog
OffsetRect
GetWindowLongA
MoveWindow
GetWindowThreadProcessId
InvalidateRect
RegisterWindowMessageA
RegisterWindowMessageW
CharUpperW
GetSysColor
RegisterClassW

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0cdad516b139a0d740cd7e590ed3c848

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 512B - Virtual size: 512B

.data Size: 32KB - Virtual size: 277KB

.rsrc Size: 55KB - Virtual size: 55KB

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 512B - Virtual size: 512B

.data
Size: 32KB - Virtual size: 277KB

.rsrc
Size: 55KB - Virtual size: 55KB

.reloc
Size: 1024B - Virtual size: 1024B