221413f03979b366c64bd4f08396d4ba

General

Target

221413f03979b366c64bd4f08396d4ba
Size

96KB
MD5

221413f03979b366c64bd4f08396d4ba
SHA1

2576344309d7e2a72f3843b93151c1bfe3b35f4d
SHA256

8e1628addf42ac6586e2acc552b45a13d901767bb66245b04b48bd50ccd4941d
SHA512

701da7d1fc49b882179b507d76c1d4f60a54149be455e9dfc74bcee2b77d25884c81d9b36509aadd94ecb153a882f9dcdf79a1071acf193716391abed96fb8f8
SSDEEP

1536:mRCCWaaG5+GcYFou+Rwf3+4uChG7IZ8qTPAJW2R+mju9EZ+fgf0b:V8aGkVCP3G7IqqT4k2R+0xf0b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
221413f03979b366c64bd4f08396d4ba

Files

221413f03979b366c64bd4f08396d4ba
.exe windows:4 windows x86 arch:x86

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetModuleFileNameA
FileTimeToLocalFileTime
TlsAlloc
GetSystemTimeAsFileTime
GetDriveTypeA
GetLocaleInfoA
HeapAlloc
TerminateProcess
GetStringTypeA
FreeLibrary
UnhandledExceptionFilter
QueryPerformanceCounter
SetEndOfFile
GetTimeZoneInformation
CompareStringA
WideCharToMultiByte
SetFilePointer
GetFileType
CompareStringW
GetTickCount
SetHandleCount
WriteFile
LCMapStringA
FreeEnvironmentStringsA
GetCurrentThreadId
VirtualFree
GetCurrentDirectoryA
DeleteCriticalSection
ReadFile
CreateFileA
GetEnvironmentStrings
FormatMessageA
GetExitCodeProcess
FileTimeToSystemTime
GetLastError
CloseHandle
FindClose
RtlUnwind
TlsFree
GetCurrentProcess
GetCurrentDirectoryW
LCMapStringW
SetLastError
SetEnvironmentVariableW
LocalFree
SetStdHandle
HeapDestroy
LoadLibraryA
GetFileAttributesA
GetACP
LeaveCriticalSection
GetSystemInfo
FlushFileBuffers
GetEnvironmentStringsW
ExitProcess
FreeEnvironmentStringsW
GetStringTypeW
EnterCriticalSection
HeapCreate
ExitThread
GetModuleHandleA
GetProcAddress
QueryPerformanceFrequency
HeapSize
InitializeCriticalSection
MultiByteToWideChar
WaitForSingleObject
GetCPInfo
HeapReAlloc
GetVersionExA
TlsSetValue
GetStartupInfoA
GetStdHandle
HeapFree
InterlockedExchange
FindNextFileA
SetEnvironmentVariableA
IsValidLanguageGroup
FreeConsole
GetOEMCP
GetExitCodeThread
FindFirstFileA
GetCommandLineA
CreateProcessA

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fdata
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a893fc1a28c5edfb0e4beb2fc33cfde

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 76KB - Virtual size: 72KB

.data Size: 4KB - Virtual size: 1.0MB

fdata Size: 4KB - Virtual size: 640B

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 72KB

.data
Size: 4KB - Virtual size: 1.0MB

fdata
Size: 4KB - Virtual size: 640B

.rsrc
Size: 8KB - Virtual size: 4KB