79010143243eda1de643bb3d49d16d2d

General

Target

79010143243eda1de643bb3d49d16d2d
Size

123KB
MD5

79010143243eda1de643bb3d49d16d2d
SHA1

d0ff3634e007f00c3b49a179416e8c5d7155afbb
SHA256

4b844cf36afed61fdba88b1ac35ce8b6b56e52e61b756c2bb9690cd42ec27b60
SHA512

d1ab358e69cad856c1d6c1d60236857481362c3f9108538afb719e4c997fdc3a3b95dcc42ea53ed9ac314e218749f2c015dadf38a8662efc1df843a2e55ca22e
SSDEEP

3072:qp4QhJsxXYClfk6y6SyBgKGg/C2p6ztO73KpfsMhpqlA:LQhCpBOKQg3p6zQ7Wf22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79010143243eda1de643bb3d49d16d2d

Files

79010143243eda1de643bb3d49d16d2d
.exe windows:4 windows x86 arch:x86

8687bfeaf619ab29d0a4f78354bb866b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

ExitProcess
WaitForSingleObject
CreateThread
lstrcatA
GetLastError
CreateMutexA
lstrcmpA
lstrcpyA
GetModuleFileNameA
lstrlenA
LoadLibraryA
GetCommandLineA
WriteProcessMemory
lstrlenW
GetModuleFileNameW
Sleep
ReadProcessMemory
GetModuleHandleA
GetCurrentProcess
IsDebuggerPresent
lstrcmpiA
GetProcAddress
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetProcessHeap
FreeConsole

user32

UpdateWindow
GetSysColor
TrackPopupMenu
MessageBoxW
GetWindowRect
SetWindowLongA
DefWindowProcA
SetTimer
TranslateMessage

gdi32

CreateDIBitmap
DeleteDC

comdlg32

ChooseFontA
PrintDlgA

shell32

SHGetFileInfoA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pcqixiq
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8687bfeaf619ab29d0a4f78354bb866b

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

shell32

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 5KB

.rsrc Size: 108KB - Virtual size: 135KB

pcqixiq Size: - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 5KB

.rsrc
Size: 108KB - Virtual size: 135KB

pcqixiq
Size: - Virtual size: 4KB