4424ed3cf6550435bd6223b5fa8f8a65

Sharing

Copy URL Twitter E-mail

General

Target

4424ed3cf6550435bd6223b5fa8f8a65
Size

128KB
MD5

4424ed3cf6550435bd6223b5fa8f8a65
SHA1

03ad552c3b5dd3953b85d073afb41b58abcf5646
SHA256

1f7ea5d8bd7784d569e302ad854b866a4867f689f64e90df42fc1b3726c32147
SHA512

34f776f58651a63dcdaf067872159a9c2c50067fe7826a3b6c4647db319c2a0a5fb15c53f6a7121e75743efece3a2da254acca272e8ae5b57b3aafc351403ac2
SSDEEP

3072:Ebg6oDBgkfPlmGBICho9gcfJpkW2kpwS6VWMTL25c:Ec1BJlmDCho9gcfJpktkS+MAc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4424ed3cf6550435bd6223b5fa8f8a65

Files

4424ed3cf6550435bd6223b5fa8f8a65
.exe windows:4 windows x86 arch:x86

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
HeapFree
HeapDestroy
HeapAlloc
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentProcessId
GetCurrentProcess
EnterCriticalSection
DeleteCriticalSection
CreateThread
InterlockedCompareExchange
CreateEventA
CloseHandle
GetProcAddress
ExitProcess
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
WriteFile
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
GetEnvironmentStrings
ReadFile
Sleep
UnhandledExceptionFilter
lstrcmpiA
CreateFileA
lstrlenA
RtlUnwind
VirtualFree
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate

user32

PeekMessageA
wsprintfA
GetParent
BeginPaint
KillTimer
MessageBoxA
GetWindowTextLengthA
PostMessageA
PostQuitMessage
SetTimer
TranslateMessage

advapi32

RegEnumKeyExA
SetEntriesInAclA
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA

ole32

OleRun

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 100KB - Virtual size: 97KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 100KB - Virtual size: 97KB

.reloc
Size: 4KB - Virtual size: 1KB