472f059c9ff424ea5b9b96617b55c60a

General

Target

472f059c9ff424ea5b9b96617b55c60a
Size

3.4MB
MD5

472f059c9ff424ea5b9b96617b55c60a
SHA1

6b0ae29809dc05d8b573406643f4b468b0208f4f
SHA256

5bd894524f096ba03dabd077d00e52c02a907900e54a9629049f5dc189f11e21
SHA512

8e55574ef1d3293a84f00123d15d6de27c81a1c29e3df2e5d66b49523e3bb818f3c20c179e2425ce8c43773125faf6d83f8ca343008a93aa4962b721d9bd7c85
SSDEEP

98304:2+YVY50nHE7dAXgYNz68AcX8x8FS1OirMhkmcpS9WPqR:2Za50HE7dU1zOcm8MjpSG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
472f059c9ff424ea5b9b96617b55c60a

Files

472f059c9ff424ea5b9b96617b55c60a
.exe windows:4 windows x86 arch:x86

884e9bed0cabb3e9e9011b5936b02e9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
CloseHandle
UnhandledExceptionFilter
FreeLibrary
SetLastError
HeapFree
LocalFree
DeleteCriticalSection
WriteFile
CreateFileW
GetModuleFileNameW
GetStdHandle
GetStartupInfoW
IsDebuggerPresent
GetCommandLineW
ReadFile
GetACP
GetFileType
GetModuleHandleA
InitializeCriticalSection
TlsSetValue
LoadLibraryW
CreateThread
GetCPInfo
SetFilePointer
CompareStringW
GetStringTypeW
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
DeleteFileW
VirtualAlloc
LocalAlloc
GetCommandLineA
SetEndOfFile
ReleaseMutex
GetFileSize
VirtualFree
LoadLibraryA
GetFullPathNameW
LoadResource
GetExitCodeProcess
ExpandEnvironmentStringsW
CreateProcessW

user32

TranslateMessage
LoadStringW
ReleaseDC
DefWindowProcW
PostQuitMessage
CreateWindowExW
GetMessageW
GetDlgItem
GetDC
GetWindowRect
PostMessageW
SetWindowPos
EnableWindow
IsWindow
EndDialog
SetTimer
BeginPaint
SetCursor
KillTimer
EnableMenuItem
GetWindow
GetWindowTextW
GetKeyState
CharUpperW

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

884e9bed0cabb3e9e9011b5936b02e9d

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB