1495c2d955dd05b2124aaeae265060aa

General

Target

1495c2d955dd05b2124aaeae265060aa
Size

3.4MB
MD5

1495c2d955dd05b2124aaeae265060aa
SHA1

cbcdac5de4bf3f7045967063217ccd028bae429b
SHA256

7bf74a6595bfb4366581b85cd8482ae961ea5889c83c83e96991eb34f61be71f
SHA512

553e31d02f3b830ca1e9400b94c781bdd188566a8cb138796fe8119047776fe5fb246a034872631c59c8846c8f7b5784615d88c3627a9c7f07871a377e467858
SSDEEP

98304:+nSwaQbgcEu13V9lgN5aEYzqRENE/0Ph:+Kcg21F9lg7aEYmiNEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1495c2d955dd05b2124aaeae265060aa

Files

1495c2d955dd05b2124aaeae265060aa
.exe windows:4 windows x86 arch:x86

56c74ceec1423f5ec2c9eef9453f84db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
QueryPerformanceCounter
CloseHandle
TerminateProcess
Sleep
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
SetLastError
HeapFree
LocalFree
DeleteCriticalSection
LeaveCriticalSection
WriteFile
GetProcessHeap
GetStartupInfoW
IsDebuggerPresent
GetACP
FormatMessageW
TlsGetValue
HeapReAlloc
GetConsoleMode
FlushFileBuffers
TlsAlloc
HeapSetInformation
LoadLibraryExW
GetCPInfo
SetFilePointer
GetFileAttributesW
GetStringTypeW
LCMapStringW
InitializeCriticalSectionAndSpinCount
FindFirstFileW
GetConsoleCP
LocalAlloc
GetCommandLineA
SetEndOfFile
ResetEvent
ReleaseMutex
OutputDebugStringW
EncodePointer
VirtualFree
LoadLibraryA
CreateDirectoryW
GetFullPathNameW
LoadResource
GetExitCodeProcess
CreateProcessW

user32

TranslateMessage
LoadStringW
ReleaseDC
DefWindowProcW
MessageBoxW
CreateWindowExW
SetWindowLongW
GetWindowLongW
GetDC
PostMessageW
SetWindowPos
GetParent
SetWindowTextW
SetForegroundWindow
GetSysColor
EndPaint
ScreenToClient
KillTimer
EnableMenuItem
UpdateWindow
SystemParametersInfoW
CharUpperW

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56c74ceec1423f5ec2c9eef9453f84db

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.text Size: 6KB - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 6KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 612KB