01362bf2365dde8797ec28a882b5f42a

General

Target

01362bf2365dde8797ec28a882b5f42a
Size

25KB
MD5

01362bf2365dde8797ec28a882b5f42a
SHA1

ac20da44d359105ffd15b7309500af7797632c21
SHA256

e11394b9ca8eed47abbd4ebd963ab6b4dee2bfe0ef09b716c7a9d4a617c7d017
SHA512

6655d84a5d433aa699e775652e0ad3557a6c2313eef6a8131a5d230c99d1e876cdd337e7cb2fda628d17a5024be2693faac6f4ee86dbc624cccf9743c772d52e
SSDEEP

384:CCnZAYp/b3cB0emwIHgNBDd7K+VkthuQIj6nmow:Cmlb3cB0twNddGhufi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01362bf2365dde8797ec28a882b5f42a

Files

01362bf2365dde8797ec28a882b5f42a
.exe windows:4 windows x86 arch:x86

97df8ecde1a683110dab5ccc5192384e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetOEMCP
GetACP
GlobalSize
FindFirstFileW
FindFirstFileA
FindNextFileW
FindNextFileA
FindClose
GetCurrentDirectoryW
CreateDirectoryW
GetCurrentDirectoryA
CreateDirectoryA
GetTickCount
Sleep
CreateThread
GetModuleHandleA
OpenEventA
SetEvent
InitializeCriticalSection

msvcrt

strtol
malloc
memset
strlen
calloc
memcpy
wcslen
fseek
fread
_wfopen
wcstombs
fopen
free
fclose
memmove
mbstowcs
swprintf
wcscmp
wcscat
wcschr
wcsncpy
fwrite
_assert
sprintf
strcat
getchar
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit
_XcptFilter
_exit
_except_handler3

gdi32

SetTextColor

user32

DrawTextA
PostQuitMessage
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
GetClipboardData
GetUpdateRect
GetClientRect
InvalidateRect
BeginPaint
FillRect
EndPaint
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
FindWindowA
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA

ws2_32

shutdown
closesocket
send
sendto
recv
recvfrom
accept
htons
socket
bind
listen
WSAStartup
WSACleanup

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97df8ecde1a683110dab5ccc5192384e

Headers

File Characteristics

Imports

kernel32

msvcrt

gdi32

user32

ws2_32

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 7KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 7KB