0326a3e66838dc2b4b99fee588cef724

General

Target

0326a3e66838dc2b4b99fee588cef724
Size

21KB
MD5

0326a3e66838dc2b4b99fee588cef724
SHA1

c9ea30f13383e0d3e44b7dbbc4f22e5e7377d7fa
SHA256

b9270d4134ee772215883f8bfb0f0a8e6b3964a1251ab8b2245ffed48ba2f3b0
SHA512

c1258113aa4869fbf91ba94412518174b6735de7bda0a34ea49c68e4a7312e0665bc2d8b86e594a7b81e8dfd9f70f0e8cb116d2a3845809bdda4c770851d4b59
SSDEEP

384:q7FgC2bfY1K+pf6u3HHGWlISKQuQYh6XiRa8zrZ9NRYw2nJkeUHaouB:Cf2Yg+1DXHpYSga8zrlaw2nf6DuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0326a3e66838dc2b4b99fee588cef724

Files

0326a3e66838dc2b4b99fee588cef724
.exe windows:4 windows x86 arch:x86

1403962f6713028e57fade5a5f821694

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
GetConsoleAliasesLengthA
CreateWaitableTimerA
OpenWaitableTimerA
FindFirstChangeNotificationA
GetEnvironmentStringsA
EnumDateFormatsA
GetFileAttributesA
GetNamedPipeHandleStateW
GetConsoleAliasExesLengthA
CreateWaitableTimerA
GetCPInfoExA
GetFileAttributesExW

user32

GetAltTabInfoA
RealGetWindowClassW
CallMsgFilterW
DefMDIChildProcW
ChangeMenuW
AppendMenuA
WinHelpA
InsertMenuA
IsCharUpperA

gdi32

EnumFontFamiliesExA
ResetDCA
EnumFontsA
GetLogColorSpaceW

Sections

.��
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 865B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1403962f6713028e57fade5a5f821694

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.��� Size: 10KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 3KB

.share Size: 6KB - Virtual size: 11KB

.masm Size: 1024B - Virtual size: 926B

.code Size: 1024B - Virtual size: 865B

.��
Size: 10KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 3KB

.share
Size: 6KB - Virtual size: 11KB

.masm
Size: 1024B - Virtual size: 926B

.code
Size: 1024B - Virtual size: 865B