502f13f594b8c7944807bb4193e3f634f0801ffd3c0667e85b4157ff9057080a[.]exe

General

Target

502f13f594b8c7944807bb4193e3f634f0801ffd3c0667e85b4157ff9057080a.exe
Size

1.3MB
MD5

5aea390ec12ea30484a0056e36961292
SHA1

eb559169003fb1911d8843eeedafa59ee3a243f7
SHA256

da260e1c5729eae7f8d3a9ba7cc4dbe3c0bda9edf979544b748314975ad62c54
SHA512

dedbd660f773982c348e015e14e7c1a4cff33b22537773ac39881affc2580c65e285a7803a5bbd6bbb23f7e4ca7b5d8ec1348809f4f78c04bf4b43fd298016ba
SSDEEP

24576:RQohaknEr6qtp93QodnkzeDKxgI6AeCXla99:RQZknK6sQinkzeDKxgI1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
502f13f594b8c7944807bb4193e3f634f0801ffd3c0667e85b4157ff9057080a.exe

Files

502f13f594b8c7944807bb4193e3f634f0801ffd3c0667e85b4157ff9057080a.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
ColorHook
DDECallback
FileHook
FileHook2
FileHook3
FontHook
KeyboardProc
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
adjustcmb2
fh2showit
fh2showwindow
fh3drawit
fh3showwindow
fhfileok
fhshowwindow
fhupdatetotal

Sections

CODE
Size: 960KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 66KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.INIT
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 960KB - Virtual size: 960KB

DATA Size: 66KB - Virtual size: 212KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.INIT Size: 6KB - Virtual size: 8KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 4KB

.reloc Size: 88KB - Virtual size: 88KB

.rsrc Size: 177KB - Virtual size: 180KB

CODE
Size: 960KB - Virtual size: 960KB

DATA
Size: 66KB - Virtual size: 212KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.INIT
Size: 6KB - Virtual size: 8KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 177KB - Virtual size: 180KB