385ec21eff75b348b622ec377b417fc2

General

Target

385ec21eff75b348b622ec377b417fc2
Size

3.4MB
MD5

385ec21eff75b348b622ec377b417fc2
SHA1

164c8000af5221fd128becc72cf195b28a5c1af4
SHA256

cb2ec658a95d96b5a2d2c365fbb8906c89b110e880b3f6e62f1d21c439ff636e
SHA512

92eaa1c0be6c09e4a2d9925e633761ec4effd608f045723a4e22b4bfb667cd20ea1d6a53f6f4d03d1c09ea34308c8cc813990d6223b7b031e449c675ac3a2f96
SSDEEP

98304:JRgMMvwrf9DhszNMfUHaxXf54oIy8qRbH0F99hQd3NBcQ:JRgMMvw5Q5QXxZIyjZUF99hQd3oQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
385ec21eff75b348b622ec377b417fc2

Files

385ec21eff75b348b622ec377b417fc2
.exe windows:4 windows x86 arch:x86

97bff4e84bfe46a32242e1e47c8a0dbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentThreadId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
CloseHandle
TerminateProcess
MultiByteToWideChar
LocalFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
IsDebuggerPresent
GetACP
FormatMessageW
TlsGetValue
GetModuleHandleA
InitializeCriticalSection
HeapReAlloc
GetConsoleMode
FlushFileBuffers
CreateEventW
HeapSetInformation
LoadLibraryW
LoadLibraryExW
TlsFree
CompareStringW
RtlUnwind
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindNextFileW
FindFirstFileW
GetConsoleCP
LocalAlloc
GetCommandLineA
EncodePointer
LoadLibraryA
GetLocaleInfoW
LoadResource

user32

ShowWindow
PostQuitMessage
CreateWindowExW
GetDlgItem
GetSystemMetrics
PostMessageW
SendMessageW
EnableWindow
LoadCursorW
GetParent
EndDialog
SetTimer
SetForegroundWindow
GetSysColor
PeekMessageW
EndPaint
BeginPaint
ScreenToClient
SetCursor
KillTimer
EnableMenuItem
GetWindow
GetWindowTextW
SystemParametersInfoW
GetKeyState
MessageBoxA

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97bff4e84bfe46a32242e1e47c8a0dbc

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB