6358a73cfceb5b53a7ae122d99a2c228

General

Target

6358a73cfceb5b53a7ae122d99a2c228
Size

137KB
MD5

6358a73cfceb5b53a7ae122d99a2c228
SHA1

43ad6700e71236ba0d7b8cf54bb9d48f73e460f9
SHA256

dd93817d78ccfbecdc314d9b3183a2eebee12a89c3c070bbafd4ee80ac258812
SHA512

dfd4e02e7bee9b23039c47342f05a021b645b4e3972bf40c2f89c16cf3b45c65ef482aeb32b66b64341e04a39187fe909ac268d7cd01c1b8f1b07a2739f23124
SSDEEP

1536:qbnGysPZixQ5rIN4xunD7TFDIblyBoNHAILzo3w9mVIZVVU7xSD/Yfrb6GhjYlWf:0xIWQhPxivyJqoSI/mVQUtrrSkKMCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6358a73cfceb5b53a7ae122d99a2c228

Files

6358a73cfceb5b53a7ae122d99a2c228
.exe windows:4 windows x86 arch:x86

265e7dc961869510e891a845517f723b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
GetStartupInfoA
CloseHandle
GetFileAttributesA
SetFileAttributesA
lstrcatA
CompareStringA
GetThreadLocale
Sleep
TerminateProcess
SwitchToThread
SetThreadPriority
GetCurrentThread
GetCurrentProcess
WideCharToMultiByte
LoadLibraryA
DeleteFileA
GetBinaryTypeA
SetHandleInformation
CreatePipe
RaiseException
SetEnvironmentVariableA
CompareStringW
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
IsBadCodePtr
GetModuleHandleA
GetLastError
FormatMessageA
lstrlenA
LocalAlloc
GetProcAddress
MulDiv
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
GetStringTypeA
ReadFile

user32

SetRect
DrawCaption
GetSysColor
GetGuiResources
GetWindowTextA
MessageBoxA
GetDC

gdi32

DeleteObject
CreateBitmap
GetDeviceCaps
CreateFontA
CreateEllipticRgn
SetBkMode
SelectObject

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

265e7dc961869510e891a845517f723b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 74KB - Virtual size: 74KB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 74KB - Virtual size: 74KB