c48a90b462bdaf9d55db4b22352a2209

General

Target

c48a90b462bdaf9d55db4b22352a2209
Size

51KB
MD5

c48a90b462bdaf9d55db4b22352a2209
SHA1

846e0b5c9593d97287b8d96a2c0bcd9f75510ba2
SHA256

3119483a75a3fe803eae3c3a057b789fd399b0ad24478e57070a95af5992acdc
SHA512

3ab155e1b197e5bed47a0ed62ba5eb5bc8f645715796a220dcb3ac21bdc8b57a22d9ff952ad476767b276baa3d84e33dbc48a794450d5883138fd2bc8ebf918b
SSDEEP

1536:nnpdgCLTl2wbG+lO4/Cxm4Inhdj4Z+hqx+:npmCXjbGdTxm7DjaR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c48a90b462bdaf9d55db4b22352a2209

Files

c48a90b462bdaf9d55db4b22352a2209
.exe windows:5 windows x86 arch:x86

3558e6406b9267fa00913dfb1140ff25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
Sleep
GetConsoleMode
GetModuleHandleA
GetCommandLineA
GetStdHandle
GetDateFormatW
GetConsoleOutputCP
GlobalUnlock
ExpandEnvironmentStringsW
WriteFile
HeapCreate
CreateEventW
VirtualFree
WideCharToMultiByte
FlushFileBuffers
GetEnvironmentStrings
lstrcpynW
FindNextFileW
LCMapStringA
FindFirstFileW
ExitProcess
HeapFree
CompareStringW
OpenProcess

ulib

?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
??0STREAM_MESSAGE@@QAE@XZ
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
??0PATH@@QAE@XZ
?Initialize@FSN_FILTER@@QAEEXZ
?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z
??1PATH@@UAE@XZ
?Initialize@WSTRING@@QAEEPBGK@Z
??1ARGUMENT_LEXEMIZER@@UAE@XZ
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
??0PATH_ARGUMENT@@QAE@XZ
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?Usage@PROGRAM@@UBEXXZ
??1DSTRING@@UAE@XZ
?Initialize@PATH@@QAEEPBV1@E@Z
??1STRING_ARGUMENT@@UAE@XZ

msvcrt

atoi
_iob
fopen
free
time
realloc
strncmp
__winitenv
toupper
__getmainargs
_errno
_adjust_fdiv
strchr
_acmdln
_stricmp
??3@YAXPAX@Z
_pctype
rand

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3558e6406b9267fa00913dfb1140ff25

Headers

File Characteristics

Imports

kernel32

ulib

msvcrt

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 64KB

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 64KB

.rsrc
Size: 1024B - Virtual size: 992B