1e7bbec08dcf4376b6681ab161608d88

General

Target

1e7bbec08dcf4376b6681ab161608d88
Size

3.4MB
MD5

1e7bbec08dcf4376b6681ab161608d88
SHA1

ab865334143cfdbe87fc80bc96195ba93f96ae7a
SHA256

aa6105d63d46a05c5e88f7451836ac1de6dcb841038568dc023bb90f5d9163b0
SHA512

443a7a7a5a43979874398aac1344698d972736dcc08e12a397f4ef19d63b1d3917ff54cdd275a46b7ee434de422b5bb2ecbe199cc5ba95235e2b9d1395164d89
SSDEEP

98304:LZ6I0F38izuL4qLFDNKczkl5WQ2b6AUpd9sTgibrSndf7:LeF3SpLF0XAUpd9YgCSdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e7bbec08dcf4376b6681ab161608d88

Files

1e7bbec08dcf4376b6681ab161608d88
.exe windows:4 windows x86 arch:x86

636b9c16b39ea02dbbf66125eaf80e32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
QueryPerformanceCounter
GetProcAddress
CloseHandle
TerminateProcess
UnhandledExceptionFilter
Sleep
FreeLibrary
MultiByteToWideChar
HeapFree
HeapAlloc
LocalFree
WriteFile
GetProcessHeap
GetModuleFileNameW
GetStdHandle
IsDebuggerPresent
FindClose
ReadFile
RaiseException
SetEvent
TlsGetValue
HeapReAlloc
TlsSetValue
CreateEventW
HeapSetInformation
HeapSize
LoadLibraryExW
GetCPInfo
TlsFree
SetFilePointer
CompareStringW
GetStringTypeW
RtlUnwind
LCMapStringW
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetEnvironmentStringsW
IsProcessorFeaturePresent
FindFirstFileW
DeleteFileW
VirtualAlloc
LocalAlloc
GetCommandLineA
GetVersionExW
CreateFileA
EncodePointer
GetLocaleInfoW
CreateDirectoryW
GetFullPathNameW
LoadResource
GetExitCodeProcess
ExpandEnvironmentStringsW
CreateProcessW

user32

TranslateMessage
DispatchMessageW
ShowWindow
ReleaseDC
DefWindowProcW
MessageBoxW
PostQuitMessage
GetMessageW
GetDlgItem
GetSystemMetrics
GetWindowRect
PostMessageW
GetClientRect
EnableWindow
IsWindow
GetParent
EndDialog
SetTimer
SetFocus
PeekMessageW
BeginPaint
ScreenToClient
InvalidateRect
GetWindow
UpdateWindow
GetKeyState

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

636b9c16b39ea02dbbf66125eaf80e32

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: - Virtual size: 612KB

.idata Size: 2KB - Virtual size: 2KB

.text Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 2KB

.text
Size: 6KB - Virtual size: 6KB