c585ce27bb3de099421f66807f432b2f

General

Target

c585ce27bb3de099421f66807f432b2f
Size

3.4MB
MD5

c585ce27bb3de099421f66807f432b2f
SHA1

5d0c7a3b859b61840f63c40c09b968a67167ff81
SHA256

200f8e0c985389213dbc51c1dc770c5d2910892d217637631299ac75c35cc78c
SHA512

57b2f8fc3261f3cfe5ae3fc27ce66bee01a83c8cee3b39caaad654ab2d899fb9ec9ceff60f0f980d24a094f51cd4107fba90b212a3bfb18e8ac47d55aacf36f8
SSDEEP

98304:xWmzm7iN2yPcOtLVWul0RAfNfpqc7q3LEacIoMk1:J8GntLYtCfA4acUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c585ce27bb3de099421f66807f432b2f

Files

c585ce27bb3de099421f66807f432b2f
.exe windows:4 windows x86 arch:x86

0738a41975fd36d71e697e7db166d7dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcess
GetSystemTimeAsFileTime
GetModuleHandleW
QueryPerformanceCounter
CloseHandle
TerminateProcess
UnhandledExceptionFilter
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
SetLastError
HeapFree
HeapAlloc
LocalFree
DeleteCriticalSection
LeaveCriticalSection
WriteFile
GetProcessHeap
GetStdHandle
GetStartupInfoW
IsDebuggerPresent
GetCommandLineW
FindClose
SetEvent
GetACP
FormatMessageW
GetFileType
TlsGetValue
GetConsoleMode
FlushFileBuffers
TlsAlloc
HeapSetInformation
HeapSize
WriteConsoleW
LoadLibraryW
LoadLibraryExW
CreateThread
GetFileAttributesW
GetStringTypeW
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
FindNextFileW
DeleteFileW
VirtualAlloc
DecodePointer
CreateFileA
LoadLibraryA
GetModuleHandleExW
CreateDirectoryW
ExpandEnvironmentStringsW

user32

TranslateMessage
LoadStringW
ShowWindow
DefWindowProcW
MessageBoxW
SetWindowLongW
GetWindowLongW
GetMessageW
GetDlgItem
GetDC
SendMessageW
GetClientRect
SetWindowPos
EnableWindow
IsWindow
LoadCursorW
EndDialog
SetWindowTextW
SetTimer
LoadIconW
SetFocus
GetSysColor
PeekMessageW
ScreenToClient
GetWindow
SystemParametersInfoW
GetKeyState
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0738a41975fd36d71e697e7db166d7dc

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 2KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 2KB