c3ef9cb45f5cc4b446a43056ec73a48b

General

Target

c3ef9cb45f5cc4b446a43056ec73a48b
Size

3.4MB
MD5

c3ef9cb45f5cc4b446a43056ec73a48b
SHA1

f9e774d51a2e869da2d153609b4fc3c2497dbc63
SHA256

8fd87bd55cdb46b5bee7e431fd7fe7da152a2ec0d511179afdab8fcd369bd036
SHA512

cb60efb057bae4764c3fb3ee3ae4da1ed95a72155dc7f9f28e7ded64e70a6643e33f0f8061fb69fbb7d8a18c869df76f8a9af692e954121fb9d7e75df9d19e31
SSDEEP

49152:OsmJOgW/G5HEJDI3pzZVKItiZlermD3jz/Tygr6tKyQtzyVhDpyLajBHj4f6gZBs:OsiWgn3XsI65//JG+CPbRjrgZQ0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3ef9cb45f5cc4b446a43056ec73a48b

Files

c3ef9cb45f5cc4b446a43056ec73a48b
.exe windows:4 windows x86 arch:x86

d5944071c2c37cfed27906682df242e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
TerminateProcess
FreeLibrary
MultiByteToWideChar
HeapFree
LeaveCriticalSection
EnterCriticalSection
CreateFileW
GetStdHandle
IsDebuggerPresent
GetCommandLineW
ReadFile
SetEvent
GetACP
FormatMessageW
InitializeCriticalSection
HeapReAlloc
CreateEventW
HeapSetInformation
HeapSize
TlsFree
SetFilePointer
GetStringTypeW
RtlUnwind
LCMapStringW
GetModuleFileNameA
GetOEMCP
SetStdHandle
FindFirstFileW
DeleteFileW
VirtualAlloc
LocalAlloc
GetCommandLineA
DecodePointer
OutputDebugStringW
GetFileSize
lstrlenW
LoadLibraryA
GetModuleHandleExW
GetLocaleInfoW
LoadResource
UnmapViewOfFile
GetExitCodeProcess
ExpandEnvironmentStringsW
CreateProcessW

user32

TranslateMessage
ShowWindow
ReleaseDC
DefWindowProcW
MessageBoxW
SetWindowLongW
GetWindowLongW
GetSystemMetrics
SendMessageW
EnableWindow
IsWindow
EndDialog
SetWindowTextW
LoadIconW
SetForegroundWindow
GetSysColor
PeekMessageW
EndPaint
ScreenToClient
KillTimer
GetWindowTextW
SystemParametersInfoW
GetKeyState
ClientToScreen

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5944071c2c37cfed27906682df242e9

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 612KB

.text Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 612KB

.text
Size: 6KB - Virtual size: 6KB