c4537c59562e7c28f7e44b41202a28e4

General

Target

c4537c59562e7c28f7e44b41202a28e4
Size

4.9MB
MD5

c4537c59562e7c28f7e44b41202a28e4
SHA1

3c68d6c18984c8904801cac88b30fbea0414e85b
SHA256

cffec20d8ee52497f6edc9c25fb6456d4225fcb2a086e74d56d7508056e91ab3
SHA512

d5dd9788d515b0614895081fe3a20e1bc7e8953d1112703d3d96a815eb6ae5adac629555b400346e2dff8e6d132f6b3e34c3fa7a019fc330c89564decab081e1
SSDEEP

49152:2erg9MmMxxnA3zcjQHgokR0yhoTwB9TPIMF8dYHQ2zNwF8HFmkn6U6TRD4mp:6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4537c59562e7c28f7e44b41202a28e4

Files

c4537c59562e7c28f7e44b41202a28e4
.exe windows:4 windows x86 arch:x86

640220e7d9fad4a9c0288fa6554024c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o:\Programmieren\Codesoft Releases\_NEW BETATEST\Trojka_Crypter_2.0\Lexxus328 Version\release\stub.pdb

Imports

kernel32

CreateFileA
lstrcatA
GetSystemDirectoryA
Module32Next
Module32First
Process32Next
Process32First
GetModuleFileNameA
GetModuleHandleA
CreateToolhelp32Snapshot
GetProcAddress
LoadResource
CloseHandle
LoadLibraryA
GetFileSize
LocalAlloc
GetCurrentProcess
LocalFree
CheckRemoteDebuggerPresent
ContinueDebugEvent
WaitForDebugEvent
CreateProcessA
IsDebuggerPresent
lstrcmpA
ExitProcess
lstrlenA
FindResourceA
lstrcpyA
HeapAlloc
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyExA
GetUserNameA
RegQueryValueExA

shlwapi

PathFindFileNameA

Sections

.f0Gx
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

640220e7d9fad4a9c0288fa6554024c4

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shlwapi

Sections

.f0Gx Size: 49KB - Virtual size: 52KB

.rsrc Size: 4.8MB - Virtual size: 4.8MB

.f0Gx
Size: 49KB - Virtual size: 52KB

.rsrc
Size: 4.8MB - Virtual size: 4.8MB