5a1f256726e10e82592542381de8037f

General

Target

5a1f256726e10e82592542381de8037f
Size

343KB
MD5

5a1f256726e10e82592542381de8037f
SHA1

2f5e8e61299b2da75263b319de0ab0126394d218
SHA256

e1da33f630a7a7ed4a264ba6f2f676fbb5fe57218e52d64a8c8550d06dfb516c
SHA512

d78003bd9fe5c48de83cd6daee95221728b671e86594ed4bc807f266486679001828b8b3ee2fedb0ff7ac35af88b266b8bc30e616840081ad06cd73ce858d5a4
SSDEEP

6144:cEdRorbSkeRBBszrctxOwyMKfpVECrKQc1kexNYkSct2dXcD/UTL:jRAePB9xDnKfp7ImOadXcE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1f256726e10e82592542381de8037f

Files

5a1f256726e10e82592542381de8037f
.exe windows:4 windows x86 arch:x86

b10bcfcc85396bba2aa85099997b3d6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
GetStockObject
SetBkColor
SelectObject

kernel32

VirtualAlloc
GetCurrentThreadId
HeapAlloc
CreateFileA
Sleep
TlsGetValue
FindClose
GlobalAlloc
InitializeCriticalSection
LocalFree
GetProcessHeap
HeapReAlloc
GetSystemTimeAsFileTime
ReadFile
GetModuleHandleA
RaiseException
GetLocaleInfoW
GetProcAddress
MultiByteToWideChar
DeleteFileA
lstrcatA
GetCurrentProcessId
GetEnvironmentStrings
LeaveCriticalSection
GetVersionExA
GetModuleFileNameA
GetEnvironmentStringsW
ExitProcess
GetFileAttributesA
lstrlenA
ReleaseMutex
LCMapStringW
EnterCriticalSection
GetLastError
GetTickCount
GetCommandLineA
GetCurrentThread
GetVersion
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsSetValue
TlsAlloc
TlsFree
SetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
IsBadWritePtr
LoadLibraryA
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
LCMapStringA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

user32

DestroyWindow
GetKeyState
LoadCursorA
InvalidateRect
SetForegroundWindow
SendMessageA
LoadStringA
SystemParametersInfoA
ReleaseDC
GetDC
EnableWindow
IsWindow
GetSystemMetrics
ShowWindow
PostQuitMessage
EndDialog
SetFocus

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b10bcfcc85396bba2aa85099997b3d6d

Headers

File Characteristics

Imports

gdi32

kernel32

user32

Sections

.text Size: 321KB - Virtual size: 321KB

.data Size: 21KB - Virtual size: 20KB

.text
Size: 321KB - Virtual size: 321KB

.data
Size: 21KB - Virtual size: 20KB