238ddb46a069d16cd200f99fb62ed1d0

Sharing

Copy URL Twitter E-mail

General

Target

238ddb46a069d16cd200f99fb62ed1d0
Size

132KB
MD5

238ddb46a069d16cd200f99fb62ed1d0
SHA1

e88f993d4e6aebe21713a5d9dcf8f3f875b73007
SHA256

b34a1ce53ba4fd0c2578a6e5624fd9b020fc3c114d8e51e731a0e1df8f8e1f10
SHA512

57209ff311166b9250f2fd5f70807fb14fe125ebefbbd3560ad00f11688477391333d2ec3672160c3dcba1662102ab8fe1a4d027eeb3b94f9557dbe2df627ac9
SSDEEP

3072:gT7dWrW+srOTmrXd6FxT+cIpwia7ELHs:gT7dWrW+srOKTdGZRcPa7EL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
238ddb46a069d16cd200f99fb62ed1d0

Files

238ddb46a069d16cd200f99fb62ed1d0
.exe windows:4 windows x86 arch:x86

b3eead3a509bf288b3b4caacca8aa883

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
SetStdHandle
SetFilePointer
GetLocaleInfoA
GetSystemInfo
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
RtlUnwind
RaiseException
GetCommandLineA
GetVersionExA
GetModuleHandleA
DebugBreak
GetProcAddress
LoadLibraryA
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
GetProcessHeap
CloseHandle
FreeLibrary
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
VirtualAlloc
HeapReAlloc
HeapValidate
GetCPInfo
GetACP
GetOEMCP
VirtualQuery
InterlockedExchange
SetConsoleCtrlHandler
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
OutputDebugStringW

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysStringLen
SysAllocString
SysFreeString
VariantInit
VariantClear
SafeArrayCreate
SafeArrayDestroy

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b3eead3a509bf288b3b4caacca8aa883

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 4KB - Virtual size: 2KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 4KB - Virtual size: 2KB