a193b8ca1fd3247764ae4a4e35ab089b

General

Target

a193b8ca1fd3247764ae4a4e35ab089b
Size

660KB
MD5

a193b8ca1fd3247764ae4a4e35ab089b
SHA1

eaf929893745e90841afe0aa8be191c626b2dc78
SHA256

6fd17291f82142ca2a9b1a8b9385d61b31fa1454456d92d78efa098ba372a166
SHA512

e2635c5b43ae8a6d2269ad6c89aea53611f88a9f8e16343138e9ec26b2fe567ff284c0ed4b588e7e0292fb1a5d011d99f9c82712ff46fa44f27ad58621ccd0a7
SSDEEP

12288:eWDrJ9KbaH0K6/NbaspLiPhCyjq855qCjVwa549Ev:3DXKbK6ZpLCqgbjV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a193b8ca1fd3247764ae4a4e35ab089b

Files

a193b8ca1fd3247764ae4a4e35ab089b
.exe windows:4 windows x86 arch:x86

52e4d994ccf19e9f60a3c7b9605d96e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
GetCommandLineA
WaitForSingleObject
CreateThread
GetLastError
HeapFree
HeapAlloc
RtlUnwind
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CloseHandle
FlushFileBuffers

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52e4d994ccf19e9f60a3c7b9605d96e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 580KB - Virtual size: 579KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 580KB - Virtual size: 579KB

.reloc
Size: 8KB - Virtual size: 5KB