4b97347d29330028052ac6019e203888

General

Target

4b97347d29330028052ac6019e203888
Size

405KB
MD5

4b97347d29330028052ac6019e203888
SHA1

53692d8b42a6b825e1ef3f9806d3412ee8935c27
SHA256

cac82d21a529050a37670995b13e8c1c501c63b19cd7941ceccb4ede4692d01d
SHA512

b273662365cb22f6a98edcbefedfacdd609621cba9819e2f2fb85e8805517004ae9ffe3e1630d184b3d6639667d2a2baaca40fbd0959e4660acfbb3ace113a15
SSDEEP

12288:cDs0J9ioi/Jtyr00O4NB6bdmzu+iZbushNs:qRiPJt80T4uMzabus4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b97347d29330028052ac6019e203888

Files

4b97347d29330028052ac6019e203888
.exe windows:4 windows x86 arch:x86

4cd321e2c0e6f9c483f323465b6f5bee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetEnvironmentStrings
VirtualQuery
GetVersion
HeapReAlloc
GetCurrentProcess
lstrlenW
lstrcpyA
GetCurrentThread
GetStringTypeA
IsBadWritePtr
RtlFillMemory
GetACP
LCMapStringW
GetLastError
OpenEventA
GetModuleFileNameA
GetTickCount
GetCurrentProcessId
WriteProfileStringA
ExitProcess
HeapDestroy
GetCPInfo
GetThreadPriorityBoost
SetCriticalSectionSpinCount
FreeEnvironmentStringsW
FreeEnvironmentStringsA
QueryPerformanceCounter
GetCommandLineA
lstrlenA
HeapCreate
GetSystemTimeAsFileTime
SetLastError
VirtualAlloc
HeapAlloc
LCMapStringA
GetCurrentThreadId
GetStringTypeW
TlsGetValue
WriteFile
SetComputerNameW
InitializeCriticalSection
UnhandledExceptionFilter
RtlUnwind
VirtualFree
TerminateProcess
CreateWaitableTimerA
GetDateFormatA
EnterCriticalSection
InterlockedExchange
SetHandleCount
HeapFree
GetEnvironmentStringsW
TlsFree
WritePrivateProfileStringW
TlsSetValue
FillConsoleOutputCharacterA
GetStartupInfoA
MultiByteToWideChar
FindResourceA
LoadLibraryA
GetStdHandle
GetModuleHandleA
TlsAlloc
GetProcAddress
DeleteCriticalSection
LeaveCriticalSection
GetFileType
GetOEMCP

shell32

SHGetSpecialFolderLocation
ShellAboutW
SheChangeDirA
SHQueryRecycleBinA
ExtractIconA

comdlg32

PageSetupDlgA
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cd321e2c0e6f9c483f323465b6f5bee

Headers

File Characteristics

Imports

kernel32

shell32

comdlg32

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 3KB - Virtual size: 14KB

.data Size: 278KB - Virtual size: 277KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 3KB - Virtual size: 14KB

.data
Size: 278KB - Virtual size: 277KB

.rsrc
Size: 4KB - Virtual size: 3KB