092965e0760b488eec301f2b030bd993

Sharing

Copy URL

Twitter E-mail

General

Target

092965e0760b488eec301f2b030bd993
Size

128KB
MD5

092965e0760b488eec301f2b030bd993
SHA1

709c30d5513f4ed5e97c3506427c0225b09c1763
SHA256

e67a53e42b85ba17059f0412b0e0529051893d3b7c953228a8cf2ea59595c584
SHA512

6ed90dbcf657aa245f41eb8867681166a0a1097c805c70c91b0f13ceaece72d8800c29bf2bab6016c93d7a7c0507a8dd3e3838806fcc1d15e4ac7441d1cad974
SSDEEP

3072:arB16oucXfUbKAdg3cOytY2z5u00lJM2DGbMIy:aLscPUbKAS3cPrlWlJM2DCMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
092965e0760b488eec301f2b030bd993

Files

092965e0760b488eec301f2b030bd993
.exe windows:4 windows x86 arch:x86

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
HeapFree
HeapDestroy
HeapAlloc
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentProcessId
GetCurrentProcess
EnterCriticalSection
DeleteCriticalSection
CreateThread
InterlockedCompareExchange
CreateEventA
CloseHandle
GetProcAddress
ExitProcess
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
WriteFile
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
GetEnvironmentStrings
ReadFile
Sleep
UnhandledExceptionFilter
lstrcmpiA
CreateFileA
lstrlenA
RtlUnwind
VirtualFree
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate

user32

PeekMessageA
wsprintfA
GetParent
BeginPaint
KillTimer
MessageBoxA
GetWindowTextLengthA
PostMessageA
PostQuitMessage
SetTimer
TranslateMessage

advapi32

RegEnumKeyExA
SetEntriesInAclA
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA

ole32

OleRun

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 100KB - Virtual size: 97KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 100KB - Virtual size: 97KB

.reloc
Size: 4KB - Virtual size: 1KB