2b48e93292369da25e326a390fbf4961

General

Target

2b48e93292369da25e326a390fbf4961
Size

124KB
MD5

2b48e93292369da25e326a390fbf4961
SHA1

e6da0bf1486589a2af881dd980341093f67c125a
SHA256

392453452fe3a424c24d137f10b66717748c85bf0db34b722094bca69b0249f5
SHA512

5e6bc15fb28554fd5f7ad9708cb4cc214cf5e7514fa2793160eb614c3a22fe772b7607362a4875df1b0a2a4a40813c03f6b605a6a590b2eeda89e31997248e91
SSDEEP

1536:rNwN7f0cyNAwRMxO50zKKFWMEAAU784IUcsvDNsVSAJOuXtEb5EXpRVyCY5uu:r+NDpwRMcqdlEAXIuDNUn3Eb5m9u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b48e93292369da25e326a390fbf4961

Files

2b48e93292369da25e326a390fbf4961
.exe windows:5 windows x86 arch:x86

962d91369066fd5d853b7ef80658dcb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
OpenMutexA
GetModuleHandleA
VirtualProtect
LCMapStringW
GetProcAddress
LoadLibraryA
Sleep
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
HeapAlloc
RtlUnwind
RaiseException
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

962d91369066fd5d853b7ef80658dcb7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 77KB - Virtual size: 76KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 77KB - Virtual size: 76KB