04b9a0f0c30492542780f32f07d283b5

General

Target

04b9a0f0c30492542780f32f07d283b5
Size

44KB
MD5

04b9a0f0c30492542780f32f07d283b5
SHA1

589855380f5668e8d3e360d9abc4602be26181e2
SHA256

385a4484a6014f7b96d9112c93b2e03051fd50942838f84e9d24ea2731b09fbd
SHA512

39dedc7e4ff07e25309190064a89792a864f41abf663faad2259d380e61ea796c7e1e3d419a3187f356125518f938ae9cfa8bfdb3580d197ad24c7894f35841a
SSDEEP

768:yahS6fbe2+Yu5hXNoHF+G/dDNLzrpN7mmOUqnUD:XE6fSE0XNoHF+GFDNPrXT7D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b9a0f0c30492542780f32f07d283b5

Files

04b9a0f0c30492542780f32f07d283b5
.exe windows:4 windows x86 arch:x86

eb7bb37d2681b9a6850dda76d612cd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
WriteFile
CreateFileA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetSystemDirectoryA
GetShortPathNameA
GetModuleFileNameA
GetSystemTime
ReadFile
SetFilePointer
lstrlenA
CopyFileA
GetTempPathA
GetProcAddress
LoadLibraryA
LCMapStringW
ExitProcess
GetModuleHandleA
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
HeapAlloc
RtlUnwind
HeapReAlloc
HeapSize
InterlockedExchange
VirtualQuery
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetLocaleInfoA
GetACP
GetOEMCP
VirtualAlloc
VirtualProtect
GetSystemInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA

wininet

InternetCloseHandle
InternetOpenA
InternetCheckConnectionA

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb7bb37d2681b9a6850dda76d612cd27

Headers

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 4KB