63eb1a040017c9f39b22496bd449da2b

General

Target

63eb1a040017c9f39b22496bd449da2b
Size

558KB
MD5

63eb1a040017c9f39b22496bd449da2b
SHA1

25a2002f07d41b1406467ce4111c1de473ac04f1
SHA256

38f9d0c7ee84ecba855453cde6ed131326518b079fdb278c41a1c1e87fd5743c
SHA512

501d2f2a34d120ac72c8f03400677addef66c79348a4e35a6611081ee2c3a4bf26d144c820c42eb1b57528978f7ab092d8444568f839ce3aa98b0f3b3e1a0f39
SSDEEP

12288:jVvJKB8Vcv1R4KBQqpu6Agg+1EK6p/WhI+6U:jxs88SKBQqpuDgFtAWu+6U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63eb1a040017c9f39b22496bd449da2b

Files

63eb1a040017c9f39b22496bd449da2b
.exe windows:4 windows x86 arch:x86

54271dd52d4918b0fc96d718ab442115

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetNumberFormatA
GlobalAlloc
SetFileAttributesA
CloseHandle
Sleep
GetTickCount
TerminateProcess
GetCurrentProcess
GetLastError
GetHandleInformation
VirtualQuery
GetProcAddress
LoadLibraryA
lstrlenA
SetEnvironmentVariableA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
GetStartupInfoA
GetLocaleInfoA
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
RaiseException

user32

GetScrollRange
IsClipboardFormatAvailable
wsprintfA
GetThreadDesktop
GetUserObjectInformationA
LoadBitmapA
UpdateWindow
MapWindowPoints
GetDoubleClickTime
SetDoubleClickTime
RegisterWindowMessageA

comdlg32

GetOpenFileNameA

imagehlp

MapFileAndCheckSumA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54271dd52d4918b0fc96d718ab442115

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

imagehlp

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 195KB - Virtual size: 194KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 195KB - Virtual size: 194KB