4618558920a4eef73d6a9e4e18ad6b4b

General

Target

4618558920a4eef73d6a9e4e18ad6b4b
Size

52KB
MD5

4618558920a4eef73d6a9e4e18ad6b4b
SHA1

738060f14fa6edc04a2e31222a5247b21e2d90b8
SHA256

492a7bf241c257d98d8a8d96e7ff339af42b43b5ccac38bd85d71feafdfab2b1
SHA512

b7db1578c3c84dfc002b12d09464ac5b65c6f5d53ef13387199d39f4665e8901a0c645b8d670a09ae5a116999b909573f20446c3f3da8445c34a27405d04b2aa
SSDEEP

768:lUKYVxQF5C3tMB+nQhe0XyNCK36/yurPYZGRYf3FLuYTclJ:l6x9E+Qhe0XyNv7/xKlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4618558920a4eef73d6a9e4e18ad6b4b

Files

4618558920a4eef73d6a9e4e18ad6b4b
.exe windows:4 windows x86 arch:x86

19a8f22f5cfe551da44741000dfd0160

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetWindowsDirectoryA
GetSystemDirectoryA
CreateFileA
GetLocaleInfoA
VirtualProtect
CloseHandle
WriteProcessMemory
VirtualProtectEx
GetProcAddress
GetModuleHandleA
ResumeThread
CreateProcessA
SetThreadContext
FlushInstructionCache
GetThreadContext
SuspendThread
RtlUnwind
RaiseException
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetSystemInfo

user32

SetThreadDesktop
CreateDesktopA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19a8f22f5cfe551da44741000dfd0160

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 16B