1af586a2d5643646a59c8ade580a03b3

General

Target

1af586a2d5643646a59c8ade580a03b3
Size

50KB
MD5

1af586a2d5643646a59c8ade580a03b3
SHA1

bcf4361b262f4a70ebba7cf2b501c6d9b669daec
SHA256

0cb363cdd547617d4f658a0ade7e034a22200b225300c8becae756fe8d3e7684
SHA512

7d9282018cfa432e7a9f12eb03096b40171111b2053c254d216b620db3f6efbb88c1e9eb986fbba843f99e8beaeed67822eb1d6d951446fe1d358b40f844ef91
SSDEEP

768:g16XkGJPzFyulUxuI23xdvjxH0XH+4d5:g1mkCMoX3/xU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1af586a2d5643646a59c8ade580a03b3

Files

1af586a2d5643646a59c8ade580a03b3
.exe windows:4 windows x86 arch:x86

df6e9845b2207cf792afd29bf7bdb168

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
SizeofResource
GetProcAddress
GetModuleHandleA
FreeResource
Sleep
CopyFileA
WinExec
GetVersionExA
GetModuleFileNameA
GetWindowsDirectoryA
Module32First
Module32Next
GetStartupInfoA
TerminateProcess
CloseHandle
LoadResource
WriteProcessMemory
CreateRemoteThread
CreateFileA
lstrlenA
LockResource
DeleteFileA
FindResourceA
Process32Next
WriteFile
OpenProcess
Process32First
CreateToolhelp32Snapshot

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey

msvcrt

__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
__getmainargs
_adjust_fdiv
__setusermatherr
_initterm
exit
_XcptFilter
_exit
??3@YAXPAX@Z
sprintf

psapi

GetModuleFileNameExA

user32

GetWindowThreadProcessId
GetMessageA
TranslateMessage
CreateWindowExA
FindWindowExA
GetClassNameA
EnumWindows
DefWindowProcA
PostQuitMessage
DispatchMessageA
LoadIconA
RegisterClassExA
SetTimer
ShowWindow
UpdateWindow
LoadCursorA

ws2_32

Sections

CODE
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packet
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

df6e9845b2207cf792afd29bf7bdb168

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

psapi

user32

ws2_32

Sections

CODE Size: 44KB - Virtual size: 44KB

.rsrc Size: 4KB - Virtual size: 4KB

.packet Size: 1KB - Virtual size: 16KB

CODE
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 4KB - Virtual size: 4KB

.packet
Size: 1KB - Virtual size: 16KB