094c46bc[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

094c46bc.exe
Size

278KB
MD5

e69540117377120ab70bee0e99dd7cd9
SHA1

1ceb675e5ce3ebd8adf9b291a18ea661797eeefe
SHA256

078e6061018577be755ec5b559d13964eb4feafb019603907b6942eee3201279
SHA512

ef3e31812facd74c2b7594342ebccd2d1f55370f9695c97ca1f61ab75af81442110d45ce838c96e6d4fe88bc295ee54e1482ff42613733230e4edae5e54945f0
SSDEEP

3072:TzORuUXLKmuoa/uQ8L3gJg8XyDcYqvFmq0ZCEsPsl5fsuVeU2K6gvX:TqRuOLduoaywg8XDNtKZskHsubB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094c46bc.exe

Files

094c46bc.exe
.exe windows:5 windows x86 arch:x86

805dbd3e1a4682acf1f4c696c2ba2ae3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
InterlockedIncrement
QueryDosDeviceA
InterlockedCompareExchange
SetComputerNameW
FindCloseChangeNotification
GetTickCount
GetConsoleAliasesLengthA
GlobalFindAtomA
SetConsoleMode
WriteConsoleW
SetComputerNameExW
GetStartupInfoA
GetLastError
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
LoadLibraryA
InterlockedExchangeAdd
LocalAlloc
CreateHardLinkW
AddAtomW
lstrcmpiW
GetModuleHandleA
VirtualProtect
PurgeComm
CompareStringA
DeleteFileW
GetCurrentProcessId
DebugBreak
ResetWriteWatch
ResumeThread
GetConsoleOutputCP
MultiByteToWideChar
GetModuleHandleW
Sleep
ExitProcess
GetStartupInfoW
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapFree
WriteFile
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
CreateFileA
HeapAlloc
HeapReAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleA

user32

SetMessageExtraInfo

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

805dbd3e1a4682acf1f4c696c2ba2ae3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 132KB - Virtual size: 132KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 19KB - Virtual size: 4.1MB

.rsrc Size: 114KB - Virtual size: 113KB

.text
Size: 132KB - Virtual size: 132KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 19KB - Virtual size: 4.1MB

.rsrc
Size: 114KB - Virtual size: 113KB