9a44da8c7864f8b677f5497a7f6ffad8

General

Target

9a44da8c7864f8b677f5497a7f6ffad8
Size

3.4MB
MD5

9a44da8c7864f8b677f5497a7f6ffad8
SHA1

cc0e06f7b68d201b845655ce9826cb7967adfb91
SHA256

bd10e1a80d03bb4929da66d11d90c7ff9573857993eb12bd475a3c6e55add2c1
SHA512

7671e6ea19d06abe8f4359e31cb4706e9ed7b285f35af59c08f73cca459236a089680149754a2f9071c4be3df726d068db08ab353cdc61a4ac48a3c87db30be2
SSDEEP

49152:yMGztB4KZTqjkovMpF7bXohvZxC1YoAGFo0KY9lSDU4wnG+VbbNKSb3otwyw9J+O:sPLI9v6FfXk+WU1KowKGMbleOJL6W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a44da8c7864f8b677f5497a7f6ffad8

Files

9a44da8c7864f8b677f5497a7f6ffad8
.exe windows:4 windows x86 arch:x86

814cd9bb48c26664d0baae6eb6ad1d9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
GetTickCount
WideCharToMultiByte
HeapFree
HeapAlloc
LocalFree
LeaveCriticalSection
GetModuleFileNameW
GetStartupInfoW
ReadFile
SetEvent
GetACP
FormatMessageW
GetModuleHandleA
HeapReAlloc
GetConsoleMode
TlsSetValue
CreateEventW
HeapSize
WriteConsoleW
CreateThread
TlsFree
GetFileAttributesW
CompareStringW
GetStringTypeW
RtlUnwind
LCMapStringW
FindNextFileW
IsValidCodePage
GetConsoleCP
GetCommandLineA
OutputDebugStringW
GetFileSize
VirtualFree
lstrlenW
LoadLibraryA
GetModuleHandleExW
GetLocaleInfoW
CreateDirectoryW
UnmapViewOfFile
CreateProcessW

user32

DispatchMessageW
ShowWindow
MessageBoxW
PostQuitMessage
CreateWindowExW
SetWindowLongW
GetMessageW
GetDlgItem
GetSystemMetrics
GetDC
GetWindowRect
SendMessageW
GetClientRect
SetWindowPos
GetParent
EndDialog
SetTimer
SetFocus
PeekMessageW
EndPaint
ScreenToClient
SetCursor
KillTimer
GetKeyState
CharUpperW

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

814cd9bb48c26664d0baae6eb6ad1d9b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB