397e36253ea7fd01b0c82ea5f267c735

General

Target

397e36253ea7fd01b0c82ea5f267c735
Size

52KB
MD5

397e36253ea7fd01b0c82ea5f267c735
SHA1

ae0eea8085eb6724f44b971e1f53ad4fc0fa2403
SHA256

46fded550199e12fcab609c8fb99f3fec74f10929be1d73a468f6c1db5a2d37c
SHA512

f57e7cfda90c20b77b45940b31fd444223ef851c0173dd3ca9c16ff7889b78608b763ecffbd775d9b9aae1fc554ebf7cf1422612a2d71c3d94069b6e97fdd8a0
SSDEEP

768:JmZqylJg7pUJt1NyQGjqPbw6wkhuz4aLn/hOTwbOaS/H51:JkHJJv1NyvqkRkhSFnJNbOj/H7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397e36253ea7fd01b0c82ea5f267c735

Files

397e36253ea7fd01b0c82ea5f267c735
.exe windows:4 windows x86 arch:x86

5d0cb3ea2509d3552f2fd9562f5315b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LocalAlloc
LocalHandle
LocalFree
lstrcmpiA
GetModuleFileNameA
WideCharToMultiByte
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
lstrcpyA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapCreate
VirtualFree
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapFree
RtlUnwind
WriteFile
GetProcAddress
HeapAlloc
VirtualAlloc
LoadLibraryA

winspool.drv

EnumPrintersA

advapi32

RegFlushKey
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qkzzclv
Size: 4KB - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5d0cb3ea2509d3552f2fd9562f5315b0

Headers

File Characteristics

Imports

kernel32

winspool.drv

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 823B

.data Size: 9KB - Virtual size: 10KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 27KB - Virtual size: 29KB

qkzzclv Size: 4KB - Virtual size: 84KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 823B

.data
Size: 9KB - Virtual size: 10KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 27KB - Virtual size: 29KB

qkzzclv
Size: 4KB - Virtual size: 84KB