562bdac143e48c5b867a6aa19fa312e8

General

Target

562bdac143e48c5b867a6aa19fa312e8
Size

56KB
MD5

562bdac143e48c5b867a6aa19fa312e8
SHA1

8a022869f0c39853b89741574f4d4488ed7b6308
SHA256

caa96a1919e05f5378cf3c4739e693917ba5d9faa946815d6706c3c564b87aa3
SHA512

48374836d4320685e1878bd292f51c98441fba2d627ab2c1a4bece0ca1911967a0cc9255c04ac7a828ca2a6149782d46da8b031da713738660258555bfa6160c
SSDEEP

768:uRqIEepY354Vn+FiTzW47891thHk324BadiGlH:1ItDnfT7891vH61adiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
562bdac143e48c5b867a6aa19fa312e8

Files

562bdac143e48c5b867a6aa19fa312e8
.exe windows:4 windows x86 arch:x86

e9736501981daaa916c01de2df9705f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalFree
VirtualFree
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
Sleep
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetStartupInfoA

user32

FindWindowA
GetWindowThreadProcessId
MessageBoxA

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD0@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ

msvcrt

_controlfp
__set_app_type
__CxxFrameHandler
memcpy
??2@YAPAXI@Z
_except_handler3
strcmp
free
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9736501981daaa916c01de2df9705f9

Headers

File Characteristics

Imports

kernel32

user32

msvcp60

msvcrt

Sections

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 40KB - Virtual size: 36KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 40KB - Virtual size: 36KB