ed1e8c97d0e6ccd57d0d8ba4ff2f5e47637934890f83494ca6e09d5b55115492

General

Target

ed1e8c97d0e6ccd57d0d8ba4ff2f5e47637934890f83494ca6e09d5b55115492
Size

156KB
MD5

19e5a176840409dd36e657f9ce6977d2
SHA1

315a2a590716910c5cecb5e132574d66bac90d6f
SHA256

ed1e8c97d0e6ccd57d0d8ba4ff2f5e47637934890f83494ca6e09d5b55115492
SHA512

0b8fbd1ae3376f287fe03da06dc375b4ad43a966ff99fc97769d913de1b6e7e54a38500abdffd2ee1b7e64c7c00a10f3dee7e8259afca79a0217fdbd54b7542c
SSDEEP

3072:csn37nu2D15w+4g/YTNbmsVTIOOb8NeHj/cGFxvmjCXodUxuzO:L37nvY+4g/YTdhIDb8NeoeZxAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed1e8c97d0e6ccd57d0d8ba4ff2f5e47637934890f83494ca6e09d5b55115492

Files

ed1e8c97d0e6ccd57d0d8ba4ff2f5e47637934890f83494ca6e09d5b55115492
.exe windows:4 windows x86 arch:x86

cf8f98d5cc483ad6d661bc4c75eca616

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
IsBadHugeWritePtr
TerminateProcess
TerminateJobObject
GetThreadSelectorEntry
GetStartupInfoA
GetBinaryTypeA
GetCurrentProcessId
GetLocaleInfoA
GetOverlappedResult
GetExitCodeProcess
SizeofResource
EnumLanguageGroupLocalesA
GetModuleHandleA
FoldStringA
ReadFile
RemoveDirectoryW
GetConsoleCP
DefineDosDeviceA
FormatMessageA
LCMapStringA
MapViewOfFileEx
VirtualLock
GetModuleFileNameA
GlobalLock
GetFileAttributesExA

msvcrt

exit
__getmainargs
_XcptFilter
_controlfp
_adjust_fdiv
_exit
_initterm
__set_app_type
_except_handler3
__setusermatherr
_acmdln
__p__commode
__p__fmode

user32

MessageBeep
CreateAcceleratorTableA
keybd_event
GetMenu
DdeUnaccessData
AppendMenuW
SetMenuContextHelpId
SetClassLongW
ImpersonateDdeClientWindow
GetCaretBlinkTime
GetWindowModuleFileNameA
DdeInitializeA
CallWindowProcW
PeekMessageW
EnumPropsExA
SetDeskWallpaper
GetAltTabInfoW
DestroyMenu
DrawFocusRect
MapVirtualKeyExW
WINNLSGetIMEHotkey

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf8f98d5cc483ad6d661bc4c75eca616

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 13KB - Virtual size: 88KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 13KB - Virtual size: 88KB

.rsrc
Size: 8KB - Virtual size: 7KB