262204bd09ab21ac06551c1d048aa599

General

Target

262204bd09ab21ac06551c1d048aa599
Size

216KB
MD5

262204bd09ab21ac06551c1d048aa599
SHA1

44a4f19fdc78fe1a0c4615b9deac961ccabce639
SHA256

3eeb1e125dfb7892396219647f1fa476ea53496687ecd2dffae83b64d4e38c2a
SHA512

36f87232bb28a1d641eb9dda39b5a520ab5b7a5606ec1875ae5112d1e086540b95011dd86366343ff05f5092980a8669eed7ce4a8c2c420f49fe9eeb011d87c0
SSDEEP

3072:1u/rlhOZN4x+cbKrB7PYzziAZl+1YcHITunT9hWUuqQFakBq1wPFDzDnyfb1LxXW:1LZkb6Cl+1YV6uJakBq1RfpLx/7wh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
262204bd09ab21ac06551c1d048aa599

Files

262204bd09ab21ac06551c1d048aa599
.exe windows:4 windows x86 arch:x86

894c49c5c734d75d5de7dad3168918d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
LockResource
SizeofResource
VirtualProtect
VirtualFree
LoadLibraryA
VirtualAlloc
ReleaseMutex
GetProcAddress
GetModuleHandleA
Sleep
LocalFree
WaitForSingleObject
PulseEvent
CreateSemaphoreA
CreateFileA
LocalAlloc
IsBadCodePtr
OpenSemaphoreA
ExitProcess
SuspendThread
DeleteTimerQueue
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
GetSystemInfo

user32

IsWindowVisible
IsIconic
ShowWindow
GetDesktopWindow
EnumThreadWindows
EnumWindows

ole32

CoUninitialize

msvfw32

DrawDibBegin

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

894c49c5c734d75d5de7dad3168918d3

Headers

File Characteristics

Imports

kernel32

user32

ole32

msvfw32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 176KB - Virtual size: 175KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 176KB - Virtual size: 175KB