67324211a20406b4999c9ec87e6c3536

General

Target

67324211a20406b4999c9ec87e6c3536
Size

492KB
MD5

67324211a20406b4999c9ec87e6c3536
SHA1

cbd96e5d18d989c3274f15ca63f5fb4c1fe59808
SHA256

e05f4a3d74a798405234cbc79734dcf0c7c233497d94709d44b3c2bc8aee009d
SHA512

26316e51ea96ab32a6e227784969911f8c42d3d0c6d6321b374fa7da581b46ca04db936ab89ab988acc3864e05fc9d596c6208fe9e996be16a2ce99afb27f9db
SSDEEP

3072:r5dcOd8Kv66NUlCtAVFsfQx/7o5z5DEVyvHgtHxIvvyMCUY8gKDzRe9DEqSi1XpK:0OhvBJyx2lQV84q3MR8PHRe15drxtu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67324211a20406b4999c9ec87e6c3536

Files

67324211a20406b4999c9ec87e6c3536
.exe windows:4 windows x86 arch:x86

7b5dc6d6177d5347e4be30804fd3a70f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
ExitProcess
WinExec
GetModuleFileNameA
Sleep
GetTickCount
GetStringTypeA
LCMapStringW
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetLastError
CloseHandle
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 432KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b5dc6d6177d5347e4be30804fd3a70f

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 432KB - Virtual size: 429KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 432KB - Virtual size: 429KB