791f144617a870026ee4670b02a617cf

General

Target

791f144617a870026ee4670b02a617cf
Size

432KB
MD5

791f144617a870026ee4670b02a617cf
SHA1

cb34e93707b59c0680f2fa99abf08ea5c65d4411
SHA256

615adbd3e36aab500ffd1c024ece37e55b75137756b33b117ca3b8ef89d7e2a3
SHA512

480741c491104368817678a09920b4303fd687cc321539cf85f5262d0d4a1a34a13344e3941a95476a992f9c28c689d7d7b2d8946dcc285c6745b261a9e178e5
SSDEEP

6144:/Cqk45AcSD3Dty9ZCOfVavfqfS5cNIdVQXcacVZWfiIblQlHBxaeJofLi:uMhSDTtyu2Ivz5cN8zdAfiOlcae2Di

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
791f144617a870026ee4670b02a617cf

Files

791f144617a870026ee4670b02a617cf
.exe windows:4 windows x86 arch:x86

e4b818d7685dbd64e6088d3044cb53da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCurrentProcess
lstrcatA
lstrcpyA
Sleep
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
CloseHandle
WriteFile
GetLastError
GetModuleFileNameA
GetSystemDirectoryA
ExitProcess
lstrcmpA
ReadProcessMemory
ReadFile
GetFileSize
FindNextFileA
FindFirstFileA
LoadLibraryA
GetProcAddress
CreateFileA
lstrlenA
DeleteFileA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

wsprintfA

advapi32

RegOpenKeyExA
GetUserNameA
RegCloseKey

shell32

SHGetFolderPathA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.umap
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 344KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4b818d7685dbd64e6088d3044cb53da

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 36KB - Virtual size: 34KB

.umap Size: 48KB - Virtual size: 44KB

.rsrc Size: 344KB - Virtual size: 340KB

.text
Size: 36KB - Virtual size: 34KB

.umap
Size: 48KB - Virtual size: 44KB

.rsrc
Size: 344KB - Virtual size: 340KB