a3cf5fd6285dd5d1ca3bcb45953d0ddc

General

Target

a3cf5fd6285dd5d1ca3bcb45953d0ddc
Size

132KB
MD5

a3cf5fd6285dd5d1ca3bcb45953d0ddc
SHA1

079ae610ba76bcbd4997827094d8221bb70de2a1
SHA256

e9e48122f2e308b60f564d0bb9baf3e705fee600115dedeaab912a104d887bec
SHA512

763a252d412890f04ee3741c2918ff7fe37da4a3f647bfb0333bd607cfb67ee800de6c52052852ccd98802af912e864a1602f8e142a72a8a3b1c820247c647b7
SSDEEP

3072:y4wCoVSdRhDMcPSIGa3M6oYPqjCuvKj6pFFi4HaBl0rB2+maX:YCSSdRhDMcPNGa3DjtuqgFZH60rIOX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3cf5fd6285dd5d1ca3bcb45953d0ddc

Files

a3cf5fd6285dd5d1ca3bcb45953d0ddc
.exe windows:4 windows x86 arch:x86

66c5abcb3d6e4fa353e40c66d9af4f3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
ExitProcess
CloseHandle
lstrlenA
SetFileTime
LoadResource
lstrcpyA
lstrcmpiA
SetLastError
GetLastError
lstrcatA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
Process32Next
GetModuleHandleA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
SetFileAttributesA
CreateDirectoryA
GetSystemDirectoryA
Sleep
CreateThread
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA

msvcrt

malloc
__CxxFrameHandler
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
??2@YAPAXI@Z
sprintf
strtok
realloc
_strrev

Sections

PAGE
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hnxyy
Size: 4KB - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

66c5abcb3d6e4fa353e40c66d9af4f3f

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

PAGE Size: 8KB - Virtual size: 4KB

.text Size: 8KB - Virtual size: 6KB

.rsrc Size: 108KB - Virtual size: 105KB

.hnxyy Size: 4KB - Virtual size: 512B

PAGE
Size: 8KB - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 108KB - Virtual size: 105KB

.hnxyy
Size: 4KB - Virtual size: 512B