864442ad7f99d81eac371d8257236d5b

General

Target

864442ad7f99d81eac371d8257236d5b
Size

3.4MB
MD5

864442ad7f99d81eac371d8257236d5b
SHA1

40b1bbb663e72be4417c95b907c9f871885cb0b1
SHA256

1c66d0f0c3813fffa5dfe2c18a390cb9613fecd060e3facfe40edd09d92cbf14
SHA512

c5233e403bdb8c49cb75c1c1d2e9b32a85b972f6de450a047b39a2817a061841101a9f051e1b957bbd3b699dbff9e76c09345275e1136784d71cf8fdcd34c808
SSDEEP

49152:J9dBEAWiR6pQqPmb0X/VI7yt0PWtXjD4CQp1D1RD00lyjYv8q6sxJpOzNGYnLBTm:JKm6mYX/VI72WWtTepfm0o54bpOsuNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
864442ad7f99d81eac371d8257236d5b

Files

864442ad7f99d81eac371d8257236d5b
.exe windows:4 windows x86 arch:x86

4bf771ca08cc1e97297f5e6102e9f7fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
Sleep
GetTickCount
FreeLibrary
WideCharToMultiByte
SetLastError
HeapAlloc
EnterCriticalSection
WaitForSingleObject
GetCommandLineW
FindClose
ReadFile
SetEvent
GetACP
GetFileType
GetConsoleMode
CreateEventW
TlsAlloc
HeapSetInformation
HeapSize
WriteConsoleW
LoadLibraryExW
CreateThread
TlsFree
GetFileAttributesW
CompareStringW
GetModuleFileNameA
GetEnvironmentStringsW
IsProcessorFeaturePresent
GetConsoleCP
LocalAlloc
DecodePointer
SetEndOfFile
ResetEvent
GetVersionExW
ReleaseMutex
OutputDebugStringW
GetFileSize
EncodePointer
LoadLibraryA
GetLocaleInfoW
LoadResource
UnmapViewOfFile
GetExitCodeProcess
ExpandEnvironmentStringsW

user32

LoadStringW
DefWindowProcW
MessageBoxW
PostQuitMessage
CreateWindowExW
GetWindowLongW
GetMessageW
GetSystemMetrics
GetWindowRect
PostMessageW
SendMessageW
GetClientRect
LoadCursorW
GetSysColor
EndPaint
BeginPaint
SetCursor
InvalidateRect
RegisterClassW
GetWindow
GetWindowTextW
SystemParametersInfoW
GetKeyState

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bf771ca08cc1e97297f5e6102e9f7fa

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: - Virtual size: 612KB

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB