c450811e64bb7b9fbc63b1c788a95774

General

Target

c450811e64bb7b9fbc63b1c788a95774
Size

432KB
MD5

c450811e64bb7b9fbc63b1c788a95774
SHA1

8f11b6cddafba5ddc8354b75fb53e2b5ba7fa94c
SHA256

c9441672cb0487e9fe6c75f6a37616b7cf3822a14004ae49e85f220fe5397e57
SHA512

3db30c55b5449a7dc89e8e434ce06367b6a78c69f668df9f6392ee2c2986131254eaefd7b41433fe08528c91b274b1ca20418680879cb8ac880c862a2f91bb65
SSDEEP

6144:w1j9606AscKDZT+6zz8fK7o1yB+c8My7hFMMhmnslBcdJXRRmSd:8c/FLzWckcyzD4slu/RRmM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c450811e64bb7b9fbc63b1c788a95774

Files

c450811e64bb7b9fbc63b1c788a95774
.exe windows:4 windows x86 arch:x86

4f89379e7bf564cf94ab002e171f9fea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
WriteFile
CreateFileA
lstrcatA
WritePrivateProfileStringA
LocalFileTimeToFileTime
SetFileTime
SizeofResource
LoadResource
FindResourceA
GetVersionExA
lstrlenA
CloseHandle
GetSystemDirectoryA
LockResource
GetCurrentProcess
HeapDestroy
GetFileType
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetPrivateProfileSectionA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

MessageBoxA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f89379e7bf564cf94ab002e171f9fea

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 408KB - Virtual size: 405KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 408KB - Virtual size: 405KB