38ecc7d5925c74865593202c07ad7235

General

Target

38ecc7d5925c74865593202c07ad7235
Size

634KB
MD5

38ecc7d5925c74865593202c07ad7235
SHA1

26bc0d81f8dcb7b9934bc9170c35e3dda5392861
SHA256

5b8be73276a2447f9128724eb5563b34c7178a82b4e2e9bcfe56f60c87dc84d8
SHA512

d954928453ab42610f7e33c383b7ac4421314f6c8baf8422673b882f8056559af8267816bc871e23ebf479f08dd96913089c5fd44129a61445ddea417662d679
SSDEEP

12288:Ppt/90f0PsKJcH812JVrMa952t7FXGOFjTs3fsTq5lVDRdQ:z68POH8QJVr2djTq0eDFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ecc7d5925c74865593202c07ad7235

Files

38ecc7d5925c74865593202c07ad7235
.dll windows:4 windows x86 arch:x86

11ac2b66d60bf8f371750c0d14b89155

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
LeaveCriticalSection
SetLastError
GetCurrentThreadId
ConnectNamedPipe
WaitForMultipleObjects
HeapAlloc
LCMapStringA
IsBadReadPtr
GetVersionExA
InitializeCriticalSection
ResetEvent
lstrcatW
HeapFree
GetSystemInfo
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
GetStdHandle
EnterCriticalSection
GetLocaleInfoA
LoadLibraryA
GetLastError
GetCPInfo
IsBadCodePtr
CreateTimerQueueTimer
GetOEMCP
WriteFile
GetModuleHandleA
SetUnhandledExceptionFilter
QueryPerformanceCounter
UnhandledExceptionFilter
GetStartupInfoA
GetEnvironmentStringsW
CreateNamedPipeA
GetACP
OpenProcess
SetEvent
ReleaseMutex
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchangeAdd
WideCharToMultiByte
GetTickCount
UnmapViewOfFile
RtlUnwind
FreeEnvironmentStringsW
InterlockedExchange
MultiByteToWideChar
HeapDestroy
GetEnvironmentStrings
GetFileType
InterlockedCompareExchange
IsBadWritePtr
lstrcpyW
InterlockedDecrement
CreateMutexW
GetModuleFileNameA
LCMapStringW
ExitThread
GetBinaryTypeA
DisconnectNamedPipe
TerminateProcess
CreateEventA
DeleteTimerQueueTimer

user32

wsprintfW
LoadIconA
DrawIcon
CreateIconFromResource

advapi32

InitializeSecurityDescriptor
GetUserNameA
SetSecurityDescriptorDacl

msvcrt

_stricmp
_wtoi
_wcsnset
fflush
vwprintf
_strnicmp
memset
towupper
wcstol
wcsstr
_ltow
wcscmp
printf
wcstod
strtok
wprintf
calloc
memcpy
wcscpy
wcslen
realloc
fprintf
wcscat
fgetws
wcsncmp
malloc
memmove
wcschr
isdigit
swprintf
scanf
free
wcstok
exit

Exports

Exports

arzm

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 564KB - Virtual size: 594KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11ac2b66d60bf8f371750c0d14b89155

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 66KB

.data Size: 564KB - Virtual size: 594KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 66KB - Virtual size: 66KB

.data
Size: 564KB - Virtual size: 594KB

.reloc
Size: 2KB - Virtual size: 2KB