c95bd067092a0b17ac2bea359a551fff

General

Target

c95bd067092a0b17ac2bea359a551fff
Size

183KB
MD5

c95bd067092a0b17ac2bea359a551fff
SHA1

f5be1ce96a4cc8a73a7a06cbcc5922c78e2aa485
SHA256

019cb5ef092ad6890cc804d154284a2ad4253cb2a2931dbf10ffd62a8b572f41
SHA512

5b6625b0a960f37e53ebe9926bd2a75be015cd68dabb998ec1f78b9b2f01b6dcc0601ae1d0fb292a3fd85c32b654af240f5f41899c3145b791789fcbbca10c4f
SSDEEP

3072:AmVniQVdfKqWWps4j/V1rA4yNZn3xVhPQbZaNIAxwbXc22jXojh5gbc1W:Amxi6Bps4DbrbEB7QbZaObFjh5uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c95bd067092a0b17ac2bea359a551fff

Files

c95bd067092a0b17ac2bea359a551fff
.exe windows:4 windows x86 arch:x86

24c68a16b3f8ea532c4ab23202a0df20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateConsoleScreenBuffer
GetTimeFormatW
AssignProcessToJobObject
_lopen
QueryPerformanceCounter
EnumDateFormatsExA
RequestDeviceWakeup
Module32NextW
CreateSemaphoreW
WriteConsoleInputVDMW
WritePrivateProfileStringW
OpenProfileUserMapping
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

OpenInputDesktop
GetIconInfo
EndDialog
GetKeyboardLayout
EnumDisplayDevicesA
DdeKeepStringHandle
ScrollWindowEx
SetSystemCursor
CreateDesktopW
CreateWindowExA
DrawCaptionTempW
DdeGetData
GetDesktopWindow
GetCaretBlinkTime
TranslateMDISysAccel
SetMenuDefaultItem
DdeNameService
CreateIcon
GetKeyNameTextA

gdi32

GdiEntry11
GetGlyphIndicesW
EngComputeGlyphSet
Escape
SetWindowOrgEx
CreatePolygonRgn
CreateDIBPatternBrushPt
GdiPlayPageEMF
ScaleWindowExtEx
SelectObject
AddFontResourceA
BRUSHOBJ_ulGetBrushColor
GetDCPenColor
GetICMProfileW
Rectangle
CopyEnhMetaFileA
PolyPolygon
GdiPlayScript
SelectPalette
ResetDCW

Sections

.text
Size: 5KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

24c68a16b3f8ea532c4ab23202a0df20

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 5KB - Virtual size: 810KB

.data Size: 173KB - Virtual size: 173KB

.rsrc Size: 1KB - Virtual size: 4KB

.edata Size: 2KB - Virtual size: 3KB

.reloc Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 810KB

.data
Size: 173KB - Virtual size: 173KB

.rsrc
Size: 1KB - Virtual size: 4KB

.edata
Size: 2KB - Virtual size: 3KB

.reloc
Size: - Virtual size: 4KB