216c65e0021ef9d335a3b493d7ee8411

General

Target

216c65e0021ef9d335a3b493d7ee8411
Size

3.4MB
MD5

216c65e0021ef9d335a3b493d7ee8411
SHA1

b1818eae36172c47c4cf0ca89efbc4cbbe8ec583
SHA256

0382d50b56f7e8c4b63bff37a620eecdfa15cf42332778767693bf01e1c9b65b
SHA512

4196fbe88b0da52cb1e545869557b56983626a23a27feecfb6bffdef9a61eee100c1690baacd5d5ae1e16179259df69018fb01e5eeb8dee550cc3aa918618b76
SSDEEP

98304:800XZ39BkO9s+A+ZWRGK13PT5YLpKgA0HyREgC:wBkZPyWRXYL0gyREX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
216c65e0021ef9d335a3b493d7ee8411

Files

216c65e0021ef9d335a3b493d7ee8411
.exe windows:4 windows x86 arch:x86

82cdbea48b127e2b69306a8c8601887e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetCurrentProcessId
QueryPerformanceCounter
GetProcAddress
CloseHandle
UnhandledExceptionFilter
GetTickCount
FreeLibrary
WideCharToMultiByte
HeapFree
DeleteCriticalSection
GetProcessHeap
CreateFileW
GetModuleFileNameW
FindClose
ReadFile
RaiseException
GetACP
FormatMessageW
HeapReAlloc
GetConsoleMode
FlushFileBuffers
CreateEventW
TlsAlloc
WriteConsoleW
LoadLibraryExW
CreateThread
SetFilePointer
GetStringTypeW
RtlUnwind
LCMapStringW
GetModuleFileNameA
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsW
GetCommandLineA
DecodePointer
ResetEvent
CreateFileA
VirtualFree
GetModuleHandleExW
GetLocaleInfoW
GetFullPathNameW
UnmapViewOfFile
GetExitCodeProcess
ExpandEnvironmentStringsW
CreateProcessW

user32

DispatchMessageW
DestroyWindow
MessageBoxW
PostQuitMessage
GetWindowLongW
GetMessageW
GetSystemMetrics
GetDC
GetWindowRect
PostMessageW
SendMessageW
GetClientRect
SetWindowPos
IsWindow
LoadCursorW
GetParent
SetWindowTextW
LoadIconW
SetFocus
SetForegroundWindow
BeginPaint
SetCursor
KillTimer
RegisterClassW
GetWindowTextW
UpdateWindow
GetKeyState
ClientToScreen

Sections

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82cdbea48b127e2b69306a8c8601887e

Headers

File Characteristics

Imports

kernel32

user32

Sections

.data Size: - Virtual size: 612KB

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.text Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 6KB - Virtual size: 6KB