b419ded849995ec8a002319870cb9f7f

Sharing

Copy URL Twitter E-mail

General

Target

b419ded849995ec8a002319870cb9f7f
Size

26KB
MD5

b419ded849995ec8a002319870cb9f7f
SHA1

8c2cab2d042c9dcb9fa0012af5ff6a990822e829
SHA256

c5eeb3467a60a843e91ecf24ab9099f6a2454e2a4b6cc8349a25ce554789b869
SHA512

7faeedca55ea1f7a46070315d113725455361b8de6e0568d22405d60f895c5d3eeab4e2bafb7bc7b88adfc978b2518966f3dad16bf258d560cd2ade3364de63b
SSDEEP

384:u/96fZO1PE7QFu2srhP+cJINEf11e4Cp3cd:g96fZULrmhNtMcd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b419ded849995ec8a002319870cb9f7f

Files

b419ded849995ec8a002319870cb9f7f
.exe windows:5 windows x86 arch:x86

8afdb503d1e5313a20d0ce91b2db16c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
Beep
CreateEventA
CreateMutexW
DeleteCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
FindNextVolumeA
FindNextVolumeMountPointW
FlushConsoleInputBuffer
GetCompressedFileSizeW
GetConsoleOutputCP
GetCurrencyFormatA
GetCurrentThread
GetNamedPipeInfo
GetStdHandle
GetSystemPowerStatus
GetTapeParameters
GetTempPathA
GetVolumeNameForVolumeMountPointA
GlobalMemoryStatusEx
GlobalReAlloc
HeapCompact
LoadModule
Module32FirstW
MoveFileA
OpenJobObjectW
ReadConsoleOutputAttribute
SetCalendarInfoA
SetCommBreak
SetConsoleTitleW
SetDefaultCommConfigA
SetProcessShutdownParameters
SetTapeParameters
SetThreadContext
SetThreadExecutionState
SleepEx
TlsGetValue
WaitCommEvent
WriteConsoleOutputA
WriteFile
WritePrivateProfileStructW
WriteProcessMemory
WriteProfileSectionW
_hread
_lwrite
lstrcpyn

msvcrt

memset
memcpy

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

b1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

b2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

b3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

b4
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8afdb503d1e5313a20d0ce91b2db16c6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 1KB - Virtual size: 1KB

b1 Size: 1024B - Virtual size: 1000B

b2 Size: 1024B - Virtual size: 1000B

b3 Size: 1024B - Virtual size: 1000B

b4 Size: 7KB - Virtual size: 7KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 128B

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 1KB - Virtual size: 1KB

b1
Size: 1024B - Virtual size: 1000B

b2
Size: 1024B - Virtual size: 1000B

b3
Size: 1024B - Virtual size: 1000B

b4
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 128B

.rsrc
Size: 10KB - Virtual size: 9KB