79e43467d99649009b97093d627b5b8e

General

Target

79e43467d99649009b97093d627b5b8e
Size

3.4MB
MD5

79e43467d99649009b97093d627b5b8e
SHA1

6063ba436822fad4bfd6b3f06b994939494bb52f
SHA256

27ed19dcc34bd19e69ce757befb18139856bdcd7dd5d096831b22737cd6dde4b
SHA512

bde4294908e2fe3638cd07193a41e13ffe4bbc6b709c11906e51faf81a2f6bedd1fa09285e6ed7a43ce0a135073b0c327d4e28586bdca876f037d0497b6b954b
SSDEEP

98304:vy3pEARMY5RKDdLsjJn8qBosa6HdUlEsFh1seFskYLzfMG:vcRMGILslntosa6HdUl0eFVYLzfM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79e43467d99649009b97093d627b5b8e

Files

79e43467d99649009b97093d627b5b8e
.exe windows:4 windows x86 arch:x86

73157f685c0d384dd1bf51065e66a2d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
GetProcAddress
CloseHandle
TerminateProcess
Sleep
LocalFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetProcessHeap
CreateFileW
GetModuleFileNameW
GetStartupInfoW
GetCommandLineW
FindClose
ReadFile
RaiseException
SetEvent
GetACP
GetFileType
HeapReAlloc
TlsSetValue
CreateEventW
TlsAlloc
HeapSetInformation
LoadLibraryW
CreateThread
CompareStringW
GetStringTypeW
LCMapStringW
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
IsValidCodePage
VirtualAlloc
GetConsoleCP
LocalAlloc
GetCommandLineA
SetEndOfFile
ResetEvent
GetVersionExW
ReleaseMutex
OutputDebugStringW
EncodePointer
VirtualFree
LoadResource
UnmapViewOfFile
GetExitCodeProcess

user32

TranslateMessage
ShowWindow
DestroyWindow
ReleaseDC
PostQuitMessage
CreateWindowExW
GetWindowLongW
GetMessageW
PostMessageW
SendMessageW
SetWindowPos
IsWindow
LoadCursorW
GetParent
LoadIconW
GetSysColor
PeekMessageW
BeginPaint
EnableMenuItem
GetWindowTextW
UpdateWindow
SystemParametersInfoW
GetKeyState
MessageBoxA
ClientToScreen

Sections

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73157f685c0d384dd1bf51065e66a2d4

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 2KB

.data Size: - Virtual size: 612KB

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 612KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB