4415fbec9b0a3c53d3168897aae1a97b

General

Target

4415fbec9b0a3c53d3168897aae1a97b
Size

135KB
MD5

4415fbec9b0a3c53d3168897aae1a97b
SHA1

8d738d26cbe55a0ea6fd97f92a3e88a9d5a7e247
SHA256

3f2101fe4a00ea8773e308c2c34971ae12c032077193faf9ddf89bcf8f502ba9
SHA512

0f40fc029d39cfb41c5c8cd0e1204d35f53620d6c2b70bda1ae61b10307ee5a9004f489d1735a3271df539ea5613439ea48888f984e2fb7da6e2d0528c8a9fc2
SSDEEP

3072:WFfjPF3OQdmVho0pOhetZMZczIV7OEzwQaccHa1VLaZnlaOm1p/lO:WRPFe4m7tUetmaEV7OEEwPXcs/lO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4415fbec9b0a3c53d3168897aae1a97b

Files

4415fbec9b0a3c53d3168897aae1a97b
.exe windows:1 windows x86 arch:x86

a93c4cf152ae4adf4582f2c1b3d1a466

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_acmdln
memcpy
_controlfp
_adjust_fdiv
_ismbbpunct
_callnewh
__p__commode
_scwprintf
__setusermatherr
__p__fmode
_exit
_spawnlp
_except_handler3
exit
_XcptFilter
_wremove
_hypot
_initterm
__getmainargs

kernel32

ExitThread
Module32First
LockResource
IsValidCodePage
QueryPerformanceFrequency
TerminateThread
FindClose
GetModuleHandleA
VirtualProtect
SetUnhandledExceptionFilter
WaitForSingleObject
CloseHandle
GetStringTypeA
WriteConsoleW
LCMapStringA
IsBadStringPtrA
GetProcessAffinityMask
GetComputerNameW
WideCharToMultiByte
HeapCreate
FileTimeToSystemTime
lstrcatA
IsBadReadPtr
InitializeCriticalSection
GetCurrentProcessId
GetTickCount
TerminateProcess
GetModuleFileNameA
GetLastError
GetStartupInfoA
TlsSetValue
lstrcpyA
HeapAlloc
UnmapViewOfFile
GetModuleHandleW

user32

GetDlgItem
UnionRect
SetWindowPos
GetWindowDC
GetWindowRect
DeleteMenu
EndDialog
DefWindowProcA
GetClassNameA
LoadIconA
CopyRect
FindWindowA
LoadAcceleratorsA
CreateWindowExA
MoveWindow
LoadMenuA
DestroyWindow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a93c4cf152ae4adf4582f2c1b3d1a466

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 99KB - Virtual size: 144KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 99KB - Virtual size: 144KB

.rsrc
Size: 25KB - Virtual size: 25KB