c3c6a47901718483d1252227d9526787

General

Target

c3c6a47901718483d1252227d9526787
Size

91KB
MD5

c3c6a47901718483d1252227d9526787
SHA1

f35647dbb6bf0abc7a1f8cebd7241e807070ad0c
SHA256

4913a8cafb3b7adaa65254626d3b5255abbf5027c5d14923f43f3c24ce0520f5
SHA512

6f78d3d053db9e8858b49869e2910fdf2694a45fc6b0122c950f281646d29c94e5956e84dc8a06c2e1836d590727b1798804a096c827162194322fab5c5d0089
SSDEEP

1536:jdrvMrK7HB0ltQ+Cb7HGZxQitM3CZMZzWXrELV2dHyh+vIoSccd:Brb0lt5CbzgxlO3CZMZU4ThbJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3c6a47901718483d1252227d9526787

Files

c3c6a47901718483d1252227d9526787
.exe windows:4 windows x86 arch:x86

d4ad0da0a8147bd324d56af5d33fb559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GlobalAlloc
Sleep
DeleteFileA
ExitProcess
CreateProcessA
lstrcatA
lstrcpyA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GetSystemTime
GetLastError
GetTickCount
GetProcAddress
LoadLibraryA
VirtualProtect
GetLocaleInfoA
CopyFileA
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo

user32

MessageBoxA

gdi32

SetDCBrushColor

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4ad0da0a8147bd324d56af5d33fb559

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 1008B

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 1008B