0038354e6e50b8332b857125cc8dac6a

General

Target

0038354e6e50b8332b857125cc8dac6a
Size

280KB
MD5

0038354e6e50b8332b857125cc8dac6a
SHA1

39136da9d91c9ad681a39640c247d03655430edd
SHA256

7c7a7e9286a132a21d6a55044ffef4a0c0615d5c6d969bc028372d190e5c5a75
SHA512

8c1c565c15de9c98392629f0ddf80b724e66355efe0535584aaaa1b05adeeb7066441d7a0105a2c64cdc9b88b5517dbb0e93b02b27628f304cc713aaef41d777
SSDEEP

6144:GU4aZuRieJHR+nh/GgtnmJxzUH2zvP6srbUxhaV3P2N6rp:GU5uRieJHRidGgtmJxzs2rP6q6oV3Ppd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0038354e6e50b8332b857125cc8dac6a

Files

0038354e6e50b8332b857125cc8dac6a
.exe windows:4 windows x86 arch:x86

0cce7de802ae72acdd9e6cbf93767638

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetLastError
VirtualAlloc
SystemTimeToFileTime
CreatePipe
VirtualFree
GetProcAddress
FlushFileBuffers
SetStdHandle
SetFilePointer
GetLocaleInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
WriteFile
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle

user32

SendMessageA
PeekMessageA
SetActiveWindow
GetFocus

ws2_32

send

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 216KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0cce7de802ae72acdd9e6cbf93767638

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 7KB

.gdata Size: 216KB - Virtual size: 1.9MB

.rsrc Size: 4KB - Virtual size: 924B

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 7KB

.gdata
Size: 216KB - Virtual size: 1.9MB

.rsrc
Size: 4KB - Virtual size: 924B