013849e7212739fe08ebc1fdd9492304

General

Target

013849e7212739fe08ebc1fdd9492304
Size

324KB
MD5

013849e7212739fe08ebc1fdd9492304
SHA1

cc91b7521ad13d75dcc8e4c5da159dc2bb1f8c38
SHA256

2a9e4ac0a4f5e40bf9fb5a766e5e2aa18c8f4ce425f1c6a453dc1b9eb71644c8
SHA512

ec617c3b90e976e6086ff3e054985ca7988e54d108dbee3807b3c5f23ec435775be44085e2e45fae5c137f24a0bf1da37be2d542a86d208a68683a6195e84453
SSDEEP

6144:IsbheCXGCSwnYXu+6Ww5LZ2PZudkObx/Q6LFfnn8NMUBeAexjfQQBfr:pdeCWCSn6Z5LZ2PIl4Enkve7x5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
013849e7212739fe08ebc1fdd9492304

Files

013849e7212739fe08ebc1fdd9492304
.exe windows:4 windows x86 arch:x86

b86ee1262a5c7599443584c6056463be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCurrentProcess
VirtualAllocEx
GetLastError
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
InitializeCriticalSection
Sleep
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b86ee1262a5c7599443584c6056463be

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 276KB - Virtual size: 282KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 276KB - Virtual size: 282KB