64557ec004612c53cfdb9a3f5e858fc9

General

Target

64557ec004612c53cfdb9a3f5e858fc9
Size

46KB
MD5

64557ec004612c53cfdb9a3f5e858fc9
SHA1

3f04794c9ef50cf5a8a4e6f2ff38dbb91d9b2bfb
SHA256

715e3e07bfb242f7a0c5b95105787a8459c896694ee393b48fb4e83ee292110f
SHA512

ebde6c7a854cbc7eced8eafcd394b95a504bf534ed0608b66f78a3df7f23c1c13de685f006506129d2ea9521e0f80dcc12464520294ac2e9c1df9ea9a1026774
SSDEEP

768:MP+qVoT8NFMeX/BjMkUQIB/c1WHNN5tH6SwBG:MpVq8NFMKO5Zy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64557ec004612c53cfdb9a3f5e858fc9

Files

64557ec004612c53cfdb9a3f5e858fc9
.exe windows:4 windows x86 arch:x86

5a3683473b66cdc8626097c681098edf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
ControlService
OpenServiceW
EqualSid
GetUserNameA
LockServiceDatabase
RegCloseKey

kernel32

VirtualFree
IsValidLocale
VirtualAlloc
GetProcessHeap
GetCurrentProcess
GetModuleHandleW
FindNextFileW
ExitProcess
GetFileType

msvcrt

ftell
strcspn
_strnicmp
__getmainargs
__p__commode
_strcmpi
__set_app_type
_fileno
__p__fmode
_beginthread
_wcsdup

gdi32

GdiGetDC
GetStockObject
ExtTextOutA
TextOutA
AngleArc
CreateHalftonePalette
PlayMetaFileRecord
GetClipBox

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoRegisterClassObject
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a3683473b66cdc8626097c681098edf

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

gdi32

version

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 12KB

.rdata Size: 13KB - Virtual size: 45KB

.edata Size: 11KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 12KB

.rdata
Size: 13KB - Virtual size: 45KB

.edata
Size: 11KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 4KB