376fd65c71894c3c5dbdb95575a2d30c

General

Target

376fd65c71894c3c5dbdb95575a2d30c
Size

160KB
MD5

376fd65c71894c3c5dbdb95575a2d30c
SHA1

60c10af4446d0f9f73443c60599ce54ed0cbf031
SHA256

d53a6ea81bc0a761c35b98ab9a79804c1c33e05d96e2a9e54d2a3a944a44732a
SHA512

5acbea280e51fbb218f43f9a82ee6400690930d3b8791d9d01f079810f1add9484483fb3744bff5eb2ee7c6825b48b3c6808b340efc88e0796445c06bbcd95d9
SSDEEP

1536:H415OQONmqwIqomiFDUIYkK4cEui1gNNx0eW6QPB/4ZW1ck8zHhTduu+qjIk9Wke:H4zh3DIqomQhYZ4z1sxtbjIUWnoRzi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376fd65c71894c3c5dbdb95575a2d30c

Files

376fd65c71894c3c5dbdb95575a2d30c
.exe windows:4 windows x86 arch:x86

9974dd6b2fb4cc21fe4593d00b96dc37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDosDeviceA
GetLastError
DefineDosDeviceA
CloseHandle
CreateFileA
Sleep
GetVersionExA
DeviceIoControl
SetLastError
GetOEMCP
VirtualAlloc
VirtualFree
FlushFileBuffers
SetStdHandle
LoadLibraryA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GlobalAddAtomA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetProcAddress
GetEnvironmentStringsW
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetFilePointer
GetStringTypeA
GetStringTypeW

user32

wsprintfA
MessageBoxA
wvsprintfA
LoadStringA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegSetValueExA

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9974dd6b2fb4cc21fe4593d00b96dc37

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 1KB