1cc39838f882b6c8928d629b1242f8c428b0e6de20365e6351b7aba2cbd768fd

General

Target

1cc39838f882b6c8928d629b1242f8c428b0e6de20365e6351b7aba2cbd768fd
Size

125KB
MD5

c6b20b9aade05a40b065898777b2b7ae
SHA1

e45ea2b91b9ca7999836c2392423fe6340bb7af2
SHA256

1cc39838f882b6c8928d629b1242f8c428b0e6de20365e6351b7aba2cbd768fd
SHA512

9964c2e9feba7a27c4e339e5beb99302a3a2ce9cca834107a29ff3afa15d076b9671fe77788fe5aaa03b603a444b250c295e076796d2dc0b413d9e89cd74b014
SSDEEP

1536:o1amlWVgnVvh71ZxPFyblsmpideum5CnoKuKiROHwCS5A3MIePWJXtgo5b81cY4G:8zlWyhDybme9CnzIOa5zIeuVbub/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cc39838f882b6c8928d629b1242f8c428b0e6de20365e6351b7aba2cbd768fd

Files

1cc39838f882b6c8928d629b1242f8c428b0e6de20365e6351b7aba2cbd768fd
.exe windows:4 windows x86 arch:x86

bfb9d21deec96b276fcaf49c50e99830

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileA
GetLastError
GetProcAddress
GetTempPathA
LoadLibraryA
VirtualProtect
GetModuleHandleW
LoadLibraryW
CompareFileTime
CloseHandle
GetTickCount
GetCurrentProcess
GetStartupInfoW
GetCommandLineW
lstrlenW
CreateFileW
GetVersionExW
GetModuleFileNameW
GetSystemDirectoryW
FreeLibrary
CreateThread
WaitForSingleObject

user32

RegisterClassA
GetSystemMetrics
LoadStringW
SendMessageW
MessageBoxW
PostMessageW
DispatchMessageW

ntdll

NtQuerySystemTime

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

osuninst

IsUninstallImageValid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bfb9d21deec96b276fcaf49c50e99830

Headers

File Characteristics

Imports

kernel32

user32

ntdll

advapi32

osuninst

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 113KB - Virtual size: 112KB

.bss Size: - Virtual size: 12B

.edata Size: 512B - Virtual size: 54B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 113KB - Virtual size: 112KB

.bss
Size: - Virtual size: 12B

.edata
Size: 512B - Virtual size: 54B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 4KB