153247577a8438a80e44fc94c65290c2166f5d205b66eefc948696a6e92adf58

General

Target

153247577a8438a80e44fc94c65290c2166f5d205b66eefc948696a6e92adf58
Size

91KB
MD5

1e4dae6c093e7a602ed7b82e0cdecf14
SHA1

dcb8edfd639f9eabec6951d5bc5fa353f3ff7da8
SHA256

153247577a8438a80e44fc94c65290c2166f5d205b66eefc948696a6e92adf58
SHA512

1f9995db9e93a89f07e013efdea6668b68816684afe84832b45a2f93aae2f5a9c1c618fea2c7e8da808fcc797950cdd6622a428b9fdeefe3e58a398631ccf3ab
SSDEEP

768:xdCoWZflvW0FuLRNf9ZbGY3wuufPScFgN2xro3k8O1H:xdCoAfldXroBO1H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153247577a8438a80e44fc94c65290c2166f5d205b66eefc948696a6e92adf58

Files

153247577a8438a80e44fc94c65290c2166f5d205b66eefc948696a6e92adf58
.exe windows:4 windows x86 arch:x86

74bebc5be0518e409d0e8eae246b7b9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
LCMapStringA
FindFirstFileA
CreateThread
CloseHandle
Sleep
TerminateProcess
Wow64DisableWow64FsRedirection
CreateDirectoryA
MoveFileA
Wow64RevertWow64FsRedirection
GetTempPathA
GetWindowsDirectoryA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
IsWow64Process
GetLastError
VirtualAlloc
VirtualFree
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
ReadFile
GetFileSize
CreateFileA
DeleteFileA
WriteFile
GetTickCount
RemoveDirectoryA
FindNextFileA

msvcrt

memmove
_strnicmp
??3@YAXPAX@Z
__CxxFrameHandler
modf
malloc
free
strtod
tolower
rand
srand
sprintf
_ftol
atoi
strncmp

shell32

ord680

user32

MessageBoxA
wsprintfA

wininet

InternetCloseHandle
InternetConnectA
HttpOpenRequestA
DeleteUrlCacheEntry
InternetGetConnectedState
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetOpenA

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gu_idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74bebc5be0518e409d0e8eae246b7b9a

Headers

File Characteristics

Imports

kernel32

msvcrt

shell32

user32

wininet

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 56KB - Virtual size: 56KB

gu_idata Size: 1KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 56KB - Virtual size: 56KB

gu_idata
Size: 1KB - Virtual size: 4KB