390dc6ab3cd1daa087953b9a285d6256

General

Target

390dc6ab3cd1daa087953b9a285d6256
Size

3.4MB
MD5

390dc6ab3cd1daa087953b9a285d6256
SHA1

a543e4e6ed727d5b9345036e2ff3fffbef4d8aa5
SHA256

534f255a9ab684d3da69fb280b2003f3e41488cdd74ec55f36d86338f69b2a82
SHA512

b4437e910280d3a84ce0e2708ce4ab0d3c2d7e4f160fa9a3abcfdc86007b7658886600b76ed4f33f7380b2f18186bce12f0d888d70c4a45fb6cef8e423fb28ae
SSDEEP

98304:t8whKWj/VwsUGcj45t2K3zRz2JB5Nbx09+U:t8hWjdwsnp5t2qz2JB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390dc6ab3cd1daa087953b9a285d6256

Files

390dc6ab3cd1daa087953b9a285d6256
.exe windows:4 windows x86 arch:x86

1f4651f3bb0795ec1481e978e0245f41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentThreadId
SetUnhandledExceptionFilter
CloseHandle
TerminateProcess
UnhandledExceptionFilter
Sleep
MultiByteToWideChar
WideCharToMultiByte
SetLastError
HeapFree
LeaveCriticalSection
WaitForSingleObject
GetProcessHeap
GetStdHandle
ReadFile
SetEvent
GetACP
TlsGetValue
GetModuleHandleA
HeapReAlloc
GetConsoleMode
FlushFileBuffers
TlsAlloc
HeapSetInformation
WriteConsoleW
LoadLibraryExW
CreateThread
GetFileAttributesW
CompareStringW
GetStringTypeW
RtlUnwind
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FindNextFileW
IsValidCodePage
GetVersionExW
ReleaseMutex
EncodePointer
LoadLibraryA
GetLocaleInfoW
UnmapViewOfFile
GetExitCodeProcess
ExpandEnvironmentStringsW

user32

TranslateMessage
LoadStringW
DispatchMessageW
ShowWindow
MessageBoxW
PostQuitMessage
CreateWindowExW
SetWindowLongW
GetWindowLongW
GetDlgItem
GetWindowRect
GetClientRect
LoadCursorW
GetParent
EndDialog
SetForegroundWindow
GetSysColor
PeekMessageW
KillTimer
RegisterClassW
GetWindow
GetWindowTextW
SystemParametersInfoW
GetKeyState
CharUpperW
ClientToScreen

Sections

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1f4651f3bb0795ec1481e978e0245f41

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: - Virtual size: 612KB