54d72c9d7dc213aa95ffb61822602885

General

Target

54d72c9d7dc213aa95ffb61822602885
Size

138KB
MD5

54d72c9d7dc213aa95ffb61822602885
SHA1

1ee2623e6b223bd136252085522bce84a578edf1
SHA256

011bdcc83d77a534f9760b85e035a07373d6297f31ca6a44f353dd51c2188a8f
SHA512

ecb05aab13d52b3fddddded3c9f8c612f774f9584f44ba16ae9b1bf79041006379380ecb1be312230c58a41cbca1d932c8f23f7f306242c8af412bf6283d8e63
SSDEEP

3072:hoqAggp/pQPRxnmquLoIIh3KCi6A1aL3jyJQI:hI7/pImquLoIIJ41a3yGI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54d72c9d7dc213aa95ffb61822602885

Files

54d72c9d7dc213aa95ffb61822602885
.exe windows:5 windows x86 arch:x86

7e0b4f373adccaa0a2ddb036ef04917d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetProcAddress
LoadLibraryA
ResumeThread
SetThreadContext
GetModuleHandleA
LCMapStringW
LCMapStringA
GetStringTypeW
RtlUnwind
RaiseException
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e0b4f373adccaa0a2ddb036ef04917d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 77KB - Virtual size: 76KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 77KB - Virtual size: 76KB