8891132d3a355477e6f1b193753f6841

General

Target

8891132d3a355477e6f1b193753f6841
Size

43KB
MD5

8891132d3a355477e6f1b193753f6841
SHA1

4fde108c84fe5c2029e0d61ec5c504d8c78db252
SHA256

e8356e4edbf3b8b300684f0f9cbc4f8d17e3359610d1679849c3bd713f96394b
SHA512

c51a7831cda7f1fd0325c6319eb5a01dcc16a4919eb2acc84dc61050ee7b445754b4dc52d7531831256185fc7a225e938a538e041bb2757568d047cd1bd89013
SSDEEP

384:tsBv9En6VUEssvRBWMbCKbqsy8crx9TpDku6DB+ZEuyn/McAA8QFEChng9D9bg:tw9EnvqiMbCkYvx76zuCpRhng9D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8891132d3a355477e6f1b193753f6841

Files

8891132d3a355477e6f1b193753f6841
.exe windows:4 windows x86 arch:x86

7225b176e1734928ea81d53a9861d20e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
SuspendThread
Sleep
ResumeThread
CreateProcessA
CloseHandle
OpenProcess
ReadProcessMemory
WriteProcessMemory
VirtualProtectEx
VirtualQueryEx
GetStringTypeA
SetEndOfFile
LoadLibraryA
GetProcAddress
CreateFileA
FlushFileBuffers
SetStdHandle
VirtualAlloc
WriteFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
ReadFile
ExitProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetStringTypeW

user32

GetDlgItem
GetWindowTextLengthA
GetWindowTextA
FindWindowA
GetWindowThreadProcessId
EndDialog
DialogBoxParamA
MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7225b176e1734928ea81d53a9861d20e

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 16KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 16KB

.rsrc
Size: 1KB - Virtual size: 1KB