800d9d59933f8d0bb5ec216e7c47c846

General

Target

800d9d59933f8d0bb5ec216e7c47c846
Size

128KB
MD5

800d9d59933f8d0bb5ec216e7c47c846
SHA1

5fd625f3c1218d11d392b5d0ed59b1a33668225b
SHA256

3e1e31531a48d63bdce10c93795ce0beb3efdc2ef41d30e1c4260fb8a9a2b65a
SHA512

e93d152646bfb548688e90ba103b6601844cd4fe2d47452df5df7e11db8867d469fae5feaa131892b95d66805d7c29ebebb3b6d6da0ab23a4f1d42081d19bc72
SSDEEP

3072:+jzqti6vVnmDym+AVEzihGT9B4h2KHgOY3:m9junqEzBT9qh2KHvY3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
800d9d59933f8d0bb5ec216e7c47c846

Files

800d9d59933f8d0bb5ec216e7c47c846
.exe windows:4 windows x86 arch:x86

fccb70fb1c8fd17a7f599742f575cdb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
HeapFree
GetProcessHeap
FindAtomA
ReadFile
GetLastError
GetFileSizeEx
GetProcAddress
GetModuleHandleA
CreateFileA
GetModuleFileNameA
LCMapStringW
LCMapStringA
GetStringTypeW
GetCommandLineA
GetVersionExA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA

user32

CreateWindowExA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fccb70fb1c8fd17a7f599742f575cdb3

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 80KB - Virtual size: 83KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 80KB - Virtual size: 83KB

.rsrc
Size: 4KB - Virtual size: 1KB