174ffd7ac0b60af34929062c2115c9f6

General

Target

174ffd7ac0b60af34929062c2115c9f6
Size

160KB
MD5

174ffd7ac0b60af34929062c2115c9f6
SHA1

c2396af3cab21b689a612e9f3d063d1a986809e3
SHA256

3e82122b102feae0477684336c839c3683f4a0e12e4af002ed6790125e0913b2
SHA512

eb298a52eddb2aaf0fc724502281729f1e44608d0c68b5bb1ba98c3c0f1295e6f54adb27072a6c7df225f7fa82985122bd171ac8cd970387811fcc7a5d12ed3e
SSDEEP

3072:uMh1h6eXdwCMMcBNcfGKpBN9Qu1in6orrHo+hnexHh9WGCOvLuh:3lvwdM+OfH1QABorHvBelvW/Ozc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
174ffd7ac0b60af34929062c2115c9f6

Files

174ffd7ac0b60af34929062c2115c9f6
.exe windows:1 windows x86 arch:x86

9f8589281485ecf07896417401f6e1d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GlobalLock
SetEvent
GetStartupInfoA
QueryPerformanceCounter
FormatMessageA
GlobalAddAtomW
CloseHandle
ExitThread
GetModuleHandleA
GetFileTime
TerminateProcess
SetLastError
GetModuleFileNameA
CreateToolhelp32Snapshot
FreeEnvironmentStringsW

msvcrt

_wtoi
_ismbbkalnum
_ismbcalpha
tan
wcspbrk
memmove
memcpy
_except_handler3
_XcptFilter
_exit
_mbcjmstojis
exit
_ismbstrail
_acmdln
_ismbcupper
fwrite
__setusermatherr
_adjust_fdiv
_mbsnbcmp
__set_app_type
_mbsrchr
_mbslwr
_wgetcwd
_initterm
_controlfp
_cwait
__p__commode
ungetwc
_wfdopen
__p__fmode
strtol
_wasctime
__getmainargs

gdi32

CreatePen
RectInRegion
SelectObject
GetDeviceCaps
SetBkMode
GetBkColor
CreateSolidBrush
CreateFontIndirectA
Polyline
MoveToEx
StartDocA
SetROP2
ExtTextOutA
DeleteDC
SetMapMode
SelectClipRgn

user32

SetClassLongA
RemoveMenu
GetParent
GetDC

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f8589281485ecf07896417401f6e1d9

Headers

File Characteristics

Imports

kernel32

msvcrt

gdi32

user32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 136KB

.rsrc Size: 139KB - Virtual size: 139KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 136KB

.rsrc
Size: 139KB - Virtual size: 139KB