1c487e0243a6c8aec4c1880b5e2c9fde

General

Target

1c487e0243a6c8aec4c1880b5e2c9fde
Size

92KB
MD5

1c487e0243a6c8aec4c1880b5e2c9fde
SHA1

e3e9816b7519eef7e2fd41d27eabbc6904786c3c
SHA256

897061af8b73b27623ec12da62b278c552b21743610aef0080f506a5f19bf0ad
SHA512

dbf44a75ba335ce7b9496ae4a2c491aeb328ad736de4708a4edd2322dcdb13aaf64dae438de09169a417cef627e427242a0ebb36caff7a8cf0cf1c6302460bea
SSDEEP

1536:Y/Uow3+Ju2TdkRehqCB6ul+HaUldb+oQoDxAjR9CjIoXYQx+NoM:Low3+02bqMUllTDxAjRMjIoXYQx+yM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c487e0243a6c8aec4c1880b5e2c9fde

Files

1c487e0243a6c8aec4c1880b5e2c9fde
.exe windows:4 windows x86 arch:x86

b2f117cc226253011f72f8eb11dd9034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA
BroadcastSystemMessageA
SendMessageA
MessageBoxA

kernel32

WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
GetCurrentThreadId
CreateEventA
SetEvent
OpenProcess
Sleep
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetStdHandle
GetConsoleScreenBufferInfo
CreateFileA
ReadConsoleOutputCharacterA
ReadConsoleOutputAttribute
ReadConsoleOutputA
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
DeleteFileA
MoveFileA
SetFilePointer
GetFileSize
CreateFileA
SetEndOfFile
GetFileType
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 261KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2f117cc226253011f72f8eb11dd9034

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 48KB - Virtual size: 48KB

.data Size: 1024B - Virtual size: 976B

.bss Size: - Virtual size: 261KB

.idata Size: 1KB - Virtual size: 1KB

.stab Size: 1KB - Virtual size: 1KB

.stabstr Size: 1KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 48KB

.data
Size: 1024B - Virtual size: 976B

.bss
Size: - Virtual size: 261KB

.idata
Size: 1KB - Virtual size: 1KB

.stab
Size: 1KB - Virtual size: 1KB

.stabstr
Size: 1KB - Virtual size: 1KB