172b716da0c11f6b7825ac5decf0f011

Sharing

Copy URL Twitter E-mail

General

Target

172b716da0c11f6b7825ac5decf0f011
Size

37KB
MD5

172b716da0c11f6b7825ac5decf0f011
SHA1

f4ddc7048cd6c3d759cd920acd8f15407b63df8c
SHA256

a21af258ed574bb5577c266c19873e19f8933037d5cee3a7d49f1b642c5cfd26
SHA512

ef4f18b404454f26f4148db786e5b4f411be7bb37cda7761ef996b4441f30a7a2adfa98f0b064a4592fa3274490f9679e0494cbd47607b978df01dceb2a6e73a
SSDEEP

768:BNDIF3AlH+68jrCBjZtNxnha52WLGXxcbPr:BB1le68cd/WLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172b716da0c11f6b7825ac5decf0f011

Files

172b716da0c11f6b7825ac5decf0f011
.exe windows:4 windows x86 arch:x86

b081b1a5a6825aec240942e7b3ac8559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetProcAddress
LoadLibraryA
ExitProcess
TerminateProcess
OpenProcess
SetFileAttributesA
GetModuleFileNameA
CloseHandle
SetFilePointer
WriteFile
CreateFileA
QueryPerformanceCounter
GetWindowsDirectoryA
SizeofResource
LockResource
FindResourceA
Sleep
QueryPerformanceFrequency

user32

wsprintfA

msvcp60

?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

msvcrt

free
fclose
fwrite
fopen
__CxxFrameHandler
wcscmp
??2@YAPAXI@Z
atoi

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b081b1a5a6825aec240942e7b3ac8559

Headers

File Characteristics

Imports

kernel32

user32

msvcp60

msvcrt

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 16KB - Virtual size: 16KB

.aspack Size: 4KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 16KB - Virtual size: 16KB

.aspack
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB