23af863c171f0223211ed5494fe4e99a

General

Target

23af863c171f0223211ed5494fe4e99a
Size

188KB
MD5

23af863c171f0223211ed5494fe4e99a
SHA1

a45bebb2e1be15c3d3d3faafed8d9a39e87e323c
SHA256

c26c72624a144ce697dd94be93b5559cb6806312228e99e48976579a7d6e8a7e
SHA512

a76af9960bff59a4fe0e489e6fe9c4fd1289e6cde9014f05b2b703e489da92a3050aa52e683010fc366087f444ef376a5ac391b08bd6102ca1f5a3a2c8b3a0b9
SSDEEP

3072:hjYnWhFwWpKf1NPV/Wfeq4ENJ5Gzjjykb6Z9+kRPj8xDVPan1hWMf:SnWhFwWMHPVukEH5cuFRPj8xD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23af863c171f0223211ed5494fe4e99a

Files

23af863c171f0223211ed5494fe4e99a
.exe windows:4 windows x86 arch:x86

36afd9391afd64c826beb7dad8571d41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
wsprintfA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_ftol
strstr
strncpy
strcmp
strrchr
__CxxFrameHandler
srand
??2@YAPAXI@Z
memcpy
rand
strlen
memset
strchr
_strrev
_strlwr
_stricmp
_except_handler3

kernel32

GetModuleHandleA
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
SetFileAttributesA
DeleteFileA
lstrlenA
CreateDirectoryA
GetCommandLineA
SetUnhandledExceptionFilter
OpenEventA
ExpandEnvironmentStringsA
GetShortPathNameA
GetFileAttributesA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
lstrcpyA
GetSystemDirectoryA
GetTickCount
CreateFileA
WriteFile
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
MoveFileA
GetTempPathA
GetCurrentDirectoryA
ExitProcess
lstrcatA
Sleep
GetProcAddress
GetLastError

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36afd9391afd64c826beb7dad8571d41

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 163KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 163KB

.rsrc
Size: 4KB - Virtual size: 3KB