c5e93a5edbee0340c66d83bfc9becb5f

General

Target

c5e93a5edbee0340c66d83bfc9becb5f
Size

69KB
MD5

c5e93a5edbee0340c66d83bfc9becb5f
SHA1

96068e7e4de54e782f8a2c0a42b05ae6408be6d8
SHA256

73f7810568b4ee189d50d10700b29280a687281f7833583109b420b11f005e4f
SHA512

06b060074932136fb58b1c8d0ee64e913137eccab2308e14736ab8eb2a7fe61b8c452daa7a5bc003e3d9d20c3086276b630569f70e60b056ea94c622101b8e6d
SSDEEP

1536:MU+dca+xrcsrvIl8ShwH3Nv7GW2w3uPQYNJ:MvercOv8I3RGWr32l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5e93a5edbee0340c66d83bfc9becb5f

Files

c5e93a5edbee0340c66d83bfc9becb5f
.exe windows:4 windows x86 arch:x86

8f9686c000d71d9fbc7fce3691348a5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnterCriticalSection
ExitProcess
ExitProcess
ExitThread
FindResourceA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileType
GetLastError
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcAddress
GetProcessHeap
GetProcessId
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetSystemDirectoryA
GetTickCount
GetVersion
GetVersion
GetVersionExA
GlobalAlloc
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
LeaveCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryA
LoadResource
LocalFree
LockResource
MultiByteToWideChar
OpenProcess
ReadFile
ReadProcessMemory
ResumeThread
RtlUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SizeofResource
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f9686c000d71d9fbc7fce3691348a5e

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 10KB - Virtual size: 12KB

.data Size: 56KB - Virtual size: 188KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 12KB

.data
Size: 56KB - Virtual size: 188KB

.rsrc
Size: 1024B - Virtual size: 4KB