1273230045c7700f9a91d6df48ab6daa

General

Target

1273230045c7700f9a91d6df48ab6daa
Size

3.4MB
MD5

1273230045c7700f9a91d6df48ab6daa
SHA1

e7ad506d2b296f1adc47b570aa258f3a43aa39c7
SHA256

f755c89e74a02985180bd5cb08f6ab4a6c24954601d737784e734b099609bbc4
SHA512

7e839eff9b479f0e965753887bae9b07ebb271d11c07c05e30efe3ca68442d011deffe030b9a0190547fe4c1ed31be5921d1494ef13a71019166caf2bc8fb1fc
SSDEEP

98304:xl0/8o8IhpUc/Q2mrhObxnvPnXvUxoldiQ:b0/j8ipUd7haNvXUxoldi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1273230045c7700f9a91d6df48ab6daa

Files

1273230045c7700f9a91d6df48ab6daa
.exe windows:4 windows x86 arch:x86

b40c0542e560e884be4414c1156b6863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
UnhandledExceptionFilter
Sleep
FreeLibrary
WideCharToMultiByte
HeapFree
HeapAlloc
LeaveCriticalSection
WriteFile
GetProcessHeap
CreateFileW
ExitProcess
GetStdHandle
IsDebuggerPresent
FindClose
RaiseException
SetEvent
FormatMessageW
GetModuleHandleA
GetConsoleMode
FlushFileBuffers
CreateEventW
TlsAlloc
LoadLibraryW
LoadLibraryExW
CreateThread
GetStringTypeW
FreeEnvironmentStringsW
FindFirstFileW
DeleteFileW
VirtualAlloc
GetConsoleCP
LocalAlloc
GetCommandLineA
DecodePointer
ResetEvent
GetVersionExW
ReleaseMutex
EncodePointer
lstrlenW
LoadLibraryA
GetModuleHandleExW
GetLocaleInfoW
GetFullPathNameW
UnmapViewOfFile

user32

DispatchMessageW
DestroyWindow
DefWindowProcW
CreateWindowExW
GetWindowLongW
GetMessageW
SendMessageW
SetWindowTextW
SetTimer
LoadIconW
SetFocus
PeekMessageW
EndPaint
BeginPaint
ScreenToClient
SetCursor
RegisterClassW
EnableMenuItem
GetWindow
GetWindowTextW
UpdateWindow
GetKeyState
CharUpperW
ClientToScreen

Sections

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b40c0542e560e884be4414c1156b6863

Headers

File Characteristics

Imports

kernel32

user32

Sections

.data Size: - Virtual size: 612KB

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 612KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB