475ec191da2d807072c3f3e943a98e0c

General

Target

475ec191da2d807072c3f3e943a98e0c
Size

92KB
MD5

475ec191da2d807072c3f3e943a98e0c
SHA1

e5b555db20d6c0644e9ac33e5082a75edaa8d413
SHA256

2fe1eacb687a939b886550511c7e6efe48c367b46fe69fc7b4a3d5383386ba3c
SHA512

75387fcdad7b6c6e9258c4f304e3a8ab7d5b2afda50bfae6307af2a6ca244b3b8e7a8a914def3d8fa834c93d1701d4791129c65fdb767dd2e8eb3c53a63760bd
SSDEEP

1536:3/Uow3+Ju2TdkRe/duZ+1kXoDglhssa0I+9lAjR9CjIoXYQx+NoM:cow3+029dR0lLV9lAjRMjIoXYQx+yM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
475ec191da2d807072c3f3e943a98e0c

Files

475ec191da2d807072c3f3e943a98e0c
.exe windows:4 windows x86 arch:x86

b2f117cc226253011f72f8eb11dd9034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA
BroadcastSystemMessageA
SendMessageA
MessageBoxA

kernel32

WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
GetCurrentThreadId
CreateEventA
SetEvent
OpenProcess
Sleep
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetStdHandle
GetConsoleScreenBufferInfo
CreateFileA
ReadConsoleOutputCharacterA
ReadConsoleOutputAttribute
ReadConsoleOutputA
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
DeleteFileA
MoveFileA
SetFilePointer
GetFileSize
CreateFileA
SetEndOfFile
GetFileType
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2f117cc226253011f72f8eb11dd9034

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 48KB - Virtual size: 48KB

.data Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 260KB

.idata Size: 1KB - Virtual size: 1KB

.stab Size: 1KB - Virtual size: 1KB

.stabstr Size: 1KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 48KB

.data
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 260KB

.idata
Size: 1KB - Virtual size: 1KB

.stab
Size: 1KB - Virtual size: 1KB

.stabstr
Size: 1KB - Virtual size: 1KB