fe463a49a4446fcaf52ba769c917b203

General

Target

fe463a49a4446fcaf52ba769c917b203
Size

192KB
MD5

fe463a49a4446fcaf52ba769c917b203
SHA1

21120db5c551cf1f95d544a2c09d56d61c0758b4
SHA256

79ffd7653880068fb44a441fbbab8e727b7ae7bd06304dfbc4d7816ebd6dd7ab
SHA512

aa21a12a2a6f9cc0b4e38271d49710d266f11b5fd54f4cade7aff953cd02003d09fc78bc66d5dd36bede042725828a9d4bdd95844c0c5d93b4a197dc30c81ef3
SSDEEP

3072:r2y1AnWLgCRlBsEcumxPiS6MRBAKAVRDDZOHv27KVfgjJUexltjkwbwHMim3D:ynWLgCRAEcu+fGK4XOHv2RxlNk4ws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe463a49a4446fcaf52ba769c917b203

Files

fe463a49a4446fcaf52ba769c917b203
.exe windows:4 windows x86 arch:x86

c26a9cdfab9b6d3fa720f51ac9d5e144

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetCurrentProcess
GetLastError
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
DeleteFileA
SetFileAttributesA
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
GetTickCount
lstrcatA
GetSystemDirectoryA
GetModuleHandleA
HeapFree
HeapAlloc
GetProcessHeap
GetProcAddress
Sleep
ExitProcess
SetEnvironmentVariableA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
MoveFileA
SetFileTime
GetFileTime
WriteFile
CreateFileA
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetShortPathNameA
ExpandEnvironmentStringsA
OpenEventA
SetUnhandledExceptionFilter
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

toupper
tolower
strcat
strncat
strchr
strcpy
memset
strstr
memcpy
strcmp
__CxxFrameHandler
strncpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
_ftol
srand
rand
_except_handler3
malloc
free
strlen
_itoa
_strnicmp
_strlwr
_strrev
_stricmp

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c26a9cdfab9b6d3fa720f51ac9d5e144

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 3KB