5929c5cf278da96e35a540b86f5441cf

General

Target

5929c5cf278da96e35a540b86f5441cf
Size

63KB
MD5

5929c5cf278da96e35a540b86f5441cf
SHA1

21cfa4dccc1e0e11dd0badb3668817735c8e2f05
SHA256

cb8cf9fdfb74cc1a16cb20d5ea31c968cd1317bac1cad2312214b949d81f81b0
SHA512

d95cd4e8a21b61e856cfe9ff92fccc094899164222eb5d6961c4f9fbd82d8742599bc55ec0857e37f3a87be2b2cebe45155f537771c6d17ceaab2237e53ba6e1
SSDEEP

1536:GXmZFwIRxkSj0ZfDOUkQCWSzc7O8tLnSo3YB90B1KX1:P7wEkDZ7RmzYtLnI2B1Y1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5929c5cf278da96e35a540b86f5441cf

Files

5929c5cf278da96e35a540b86f5441cf
.exe windows:4 windows x86 arch:x86

989010d0a76ed285c3d9ba7f53524b77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
exit
memset
strstr

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
CreateMutexA
FindResourceA
SizeofResource
LoadResource
LockResource
GetCurrentThread
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetModuleFileNameA
OpenMutexA

advapi32

GetUserNameA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

989010d0a76ed285c3d9ba7f53524b77

Headers

File Characteristics

Imports

msvcr80

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 916B

.rsrc Size: 56KB - Virtual size: 69KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 916B

.rsrc
Size: 56KB - Virtual size: 69KB