70979b2b41a95ba4acab527bcc8c8c5c

General

Target

70979b2b41a95ba4acab527bcc8c8c5c
Size

49KB
MD5

70979b2b41a95ba4acab527bcc8c8c5c
SHA1

26164d0dfa47e5bff28e6e81a1724218c6b86600
SHA256

9c9188a0b0c4637f59d5cb33a71dd53641d751a2b3e812b23f1a82bf71e42f4c
SHA512

3f4f1ae2748fa402975d2170a347be622e90190afa278ddcde18cf578ee3bd38158f83837b23fc8f92575db1232554e63ebd1d5c12f94cac7bce7c1dbbe2048f
SSDEEP

768:Ek/7PosyiCkThNbmz+C7BtNliYGYo9drcYeYBbB:EkzPoeThNbA+CVFiyoHcYxbB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70979b2b41a95ba4acab527bcc8c8c5c

Files

70979b2b41a95ba4acab527bcc8c8c5c
.dll windows:4 windows x86 arch:x86

69dc1fe11381d374fa945df656779ed0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenFile
GetFileAttributesA
CreateProcessA
GetSystemDirectoryA
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
GetFileSize
TerminateProcess
VirtualAlloc
ReadFile
CloseHandle
GetModuleHandleA
WriteFile
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapReAlloc
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyA

Exports

Exports

installA
outlookrun

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69dc1fe11381d374fa945df656779ed0

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB