76f5ae331186a01a15aad57873664d96

General

Target

76f5ae331186a01a15aad57873664d96
Size

94KB
MD5

76f5ae331186a01a15aad57873664d96
SHA1

6b9779f9d74c6574795629a1625291e657a56d99
SHA256

f3da2a71395925384ddc312d41241bae68f722f30001da86097cd5b88cfda16b
SHA512

597d498d93d19dd46c06cefbd497d15231ff4da0f09b7d48b250ecb099df1f5f3fe1af56032ce9aefc40a2ff2f8ad69afe272177f5822deffa8aa94be05373b6
SSDEEP

1536:letFPZi3YN2GnTXo2jOlaavR0EZGJJCDP+M8CRMmgIktsJhaaCB:EtZMwk26lnZ0EZG3MP+zfP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76f5ae331186a01a15aad57873664d96

Files

76f5ae331186a01a15aad57873664d96
.exe windows:4 windows x86 arch:x86

249e5f992730f338da076869498addd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpIW
StrCpyNW
PathRemoveFileSpecW
StrCatW

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
GetLastError
CreateMutexW
CloseHandle
ReleaseMutex
WaitForSingleObject
GetProcAddress
GetFileAttributesW
OpenProcess
GetModuleHandleW
FreeLibrary
CreateThread
TerminateProcess
GetCurrentProcess
WaitForMultipleObjects
GetCurrentProcessId
CreateEventW
LoadLibraryW
SetEvent
OpenEventW
OutputDebugStringW
GetModuleFileNameW
GetCommandLineW
ExitProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange

shell32

CommandLineToArgvW

msvcr80

_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_cexit
__wgetmainargs
_amsg_exit
memset

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

249e5f992730f338da076869498addd0

Headers

File Characteristics

Imports

shlwapi

kernel32

shell32

msvcr80

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 79KB - Virtual size: 80KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 79KB - Virtual size: 80KB