1d2b8828a543e198f5f943d49562865a

General

Target

1d2b8828a543e198f5f943d49562865a
Size

93KB
MD5

1d2b8828a543e198f5f943d49562865a
SHA1

d2b31bdb33345e74c5a477e1741cae89b91b20be
SHA256

a4cce2490faf2b133c1b8943ef4029cd064a336ac5359053d197dbebf090e776
SHA512

7b3a337736126f7d8f5291b0e8144826357f2c1039d8970db5a9afeba7a62418d259403cad7c6f6843a10a596a6868ba52a3750cd4718d3e7d58175cd18d4769
SSDEEP

1536:m6e5OW5CFIKV28eSKipBi1hRjQifOojzTjA9LLRr+56cQxsYMHAY:m6np/2TSKsBkQNkzTkl+5HHAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d2b8828a543e198f5f943d49562865a

Files

1d2b8828a543e198f5f943d49562865a
.exe windows:5 windows x86 arch:x86

7c0785d3b7cdf602fa31391cf491088a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
fputs
__setusermatherr
_XcptFilter
strchr
wcslen
strncmp
__wgetmainargs
??2@YAPAXI@Z
_controlfp
_errno
_acmdln
_initterm
__getmainargs
_adjust_fdiv
_except_handler3
_pctype
toupper
wcscpy
_iob
atoi

ulib

??1DSTRING@@UAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??0FSN_FILTER@@QAE@XZ
??0DSTRING@@QAE@XZ
??1PATH@@UAE@XZ
?Initialize@FSN_FILTER@@QAEEXZ
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
??0ARRAY@@QAE@XZ
?Initialize@CLASS_DESCRIPTOR@@QAEEXZ
??1PROGRAM@@UAE@XZ
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
??0PATH_ARGUMENT@@QAE@XZ
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?ValidateVersion@PROGRAM@@UBEXKK@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z

kernel32

GetVersionExA
Sleep
GetCommandLineA
GetModuleHandleA
GetStdHandle
GetConsoleMode
CreateThread
InterlockedIncrement
GetModuleFileNameA
EnterCriticalSection
GetLastError
CreateFileW
LoadLibraryA
LocalAlloc
LoadLibraryExA
CreateFileA
GetConsoleOutputCP
DeleteFileW
FormatMessageW
ReadFile
InitializeCriticalSection
VirtualProtect

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c0785d3b7cdf602fa31391cf491088a

Headers

File Characteristics

Imports

msvcrt

ulib

kernel32

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 42KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 42KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 2KB - Virtual size: 1KB