5b8ffb0d72dd51a91771dfc3ece38de8

General

Target

5b8ffb0d72dd51a91771dfc3ece38de8
Size

73KB
MD5

5b8ffb0d72dd51a91771dfc3ece38de8
SHA1

2c7fee442b118f326c11ba55b2e855fa5a052241
SHA256

a12a741bb4dcaf1744b0e3c52e1aaa9a6d31f59598ce31c6512a161742e9f229
SHA512

d14efda6705138d1360aa9c15090678e7c02062a81e88977fa0df1dc6e712aa8389c372a397ddb2251bf2205786d9d75738ab6facdb7e01a0b8f863b23173a9b
SSDEEP

768:RaN7eyeaLZ1+K5t20+vGtb9tAy7Lf8o+gDJe0SWa8HED:Raia175td+vGtACf8eJzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b8ffb0d72dd51a91771dfc3ece38de8

Files

5b8ffb0d72dd51a91771dfc3ece38de8
.exe windows:4 windows x86 arch:x86

bbeb6b104776ef2eeba9a04c4d2cb566

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
GetProcAddress
LoadLibraryA
lstrlenA
GetLocalTime
SetFileTime
LockResource
LoadResource
Sleep
GetWindowsDirectoryA
CreateThread
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
HeapReAlloc
HeapAlloc
MoveFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
CloseHandle
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbeb6b104776ef2eeba9a04c4d2cb566

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 200KB - Virtual size: 199KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 200KB - Virtual size: 199KB