c49498a94910a22b957de3c77e0fe66e

General

Target

c49498a94910a22b957de3c77e0fe66e
Size

196KB
MD5

c49498a94910a22b957de3c77e0fe66e
SHA1

2788fb11aa737412c7e534abc5f2ef8667ae53a3
SHA256

53b68499748febcbf853c2cfd989a585096c012ac97971a34003f38ec6cb2ba6
SHA512

433b5d62ff8961b4bfd3b6ede29abc427ab9817359ace3a5201597a0a7b453189c7a992e28e7558c32b8093180e5cc6e3f511cf193a67722c3ac82f20ad7a1f2
SSDEEP

3072:JbcswvyoZRK3/nwERoRRat/h7Q8UJS/UYjyI1ti9+V+zu8LcAHECXjyn6IXFDhO3:nw6ianIRiCWGm4+kLzHlXen6IXFH7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c49498a94910a22b957de3c77e0fe66e

Files

c49498a94910a22b957de3c77e0fe66e
.exe windows:4 windows x86 arch:x86

e52d6870a91b7b79e123608a40564ff6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
GetTickCount
GetModuleHandleA
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CloseHandle

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fubar
Size: 144KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e52d6870a91b7b79e123608a40564ff6

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 23KB

.fubar Size: 144KB - Virtual size: 216KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 23KB

.fubar
Size: 144KB - Virtual size: 216KB