a2365909b9fdfaa60d3cd6f97e61da71

Sharing

Copy URL Twitter E-mail

General

Target

a2365909b9fdfaa60d3cd6f97e61da71
Size

309KB
MD5

a2365909b9fdfaa60d3cd6f97e61da71
SHA1

896bcf8dc493caacc43781fff3e32d8b5f22d845
SHA256

dddf206612d51fd4e4da5c1efd03bea6e41d12600322a69e596d0f4d607a755d
SHA512

847ba2e7e1658e67e2add576a3d791d4f265e2b5cc25993d47d960eb573149376b7a2dc7785ceb3dbb35c7295c9f155d3969964ebb860813b74140f0a02132ff
SSDEEP

3072:9w4dMeQoDNdgzoiXBEZb6bFNWQiEefrCv1KUkLCN2CfBdT75h9aJgg:G4INcsFnWQizCdfuChfB1th8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2365909b9fdfaa60d3cd6f97e61da71

Files

a2365909b9fdfaa60d3cd6f97e61da71
.exe windows:4 windows x86 arch:x86

db2b2035a37e1953b24e6ef58d2ced90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetProcAddress
TerminateProcess
GetCurrentProcess
ExitProcess
CompareStringW
CompareStringA
LCMapStringW
HeapReAlloc
SetEnvironmentVariableA
LCMapStringA
GetStringTypeA
SetEndOfFile
LoadLibraryA
IsBadCodePtr
IsBadWritePtr
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
ReadFile
GetTickCount
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStringTypeW
IsBadReadPtr
GetACP
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
WriteFile
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
SetUnhandledExceptionFilter

user32

DefWindowProcA
GetMessageA
TranslateMessage
PeekMessageA
ShowCursor
GetCursorPos
RegisterClassA
GetDC
UpdateWindow
ShowWindow
CreateWindowExA
LoadCursorA

gdi32

SetBkMode
GetStockObject
CreateSolidBrush
TextOutA
SetTextColor

comdlg32

GetOpenFileNameA

ddraw

DirectDrawCreate

dsound

DirectSoundCreate

dinput

DirectInputCreateA

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 40KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

db2b2035a37e1953b24e6ef58d2ced90

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ddraw

dsound

dinput

Sections

.text Size: 250KB - Virtual size: 250KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 14KB - Virtual size: 192KB

.idata Size: 40KB - Virtual size: 68KB

.text
Size: 250KB - Virtual size: 250KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 14KB - Virtual size: 192KB

.idata
Size: 40KB - Virtual size: 68KB