cb729c0cda8769935c54b67bcc79fb57

General

Target

cb729c0cda8769935c54b67bcc79fb57
Size

75KB
MD5

cb729c0cda8769935c54b67bcc79fb57
SHA1

2d5045665f5e48bb33c5cf7399087b9611c59270
SHA256

cabeabbd63e8c89eb3e2fe81dfff771a56c285aa271614756fb84354901c434e
SHA512

f99bc824489323650240670c2c3d6812d628ba47650b57f9e51712d408623d3f55049167e2bfb97772a2e6c86003aa74fb7eec2270b2eeb2d26d38843c5d4797
SSDEEP

1536:/+ebyvbSRFs+UTP+bQ0KnBcnJ+4M+SISo/3MiY2/g4:dWvuRFs+Uz+8TB6tM+5V/8J2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb729c0cda8769935c54b67bcc79fb57

Files

cb729c0cda8769935c54b67bcc79fb57
.exe windows:4 windows x86 arch:x86

bda3f4dd9599422dd6ea6c537862ddf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
GetUserDefaultLCID
CreateSemaphoreA
Sleep
GetEnvironmentStringsW
MapViewOfFile
GetAtomNameA
GetModuleHandleW
SetProcessWorkingSetSize
VirtualAlloc
GetConsoleCharType
LoadLibraryA
WaitForMultipleObjectsEx
GetLastError
ExitProcess
GetPrivateProfileStringW
GetConsoleCP
GetProfileStringA
GetModuleHandleA
OutputDebugStringA

msvcrt

__setusermatherr
__pxcptinfoptrs
vwprintf
_winmajor
memcpy
__p___mb_cur_max
_pipe
fwrite
_adj_fptan
_wctime
_futime64
_heapwalk
fputc
_utime
__p___winitenv
_wtol
_memccpy
_mbsncoll
__initenv
_CxxThrowException

user32

LoadStringW
GetClipboardData
CheckMenuRadioItem
LoadImageW
EnumDisplayMonitors
GetAncestor
EmptyClipboard
SetForegroundWindow
DefWindowProcW
IsDlgButtonChecked
TranslateMessage
EqualRect
DestroyWindow
ModifyMenuA
AdjustWindowRect
OpenClipboard
RemoveMenu
GetMonitorInfoW

Exports

Exports

ZyTzimcmLueemygRbiinn
BznCfxklgVwakycyXvusnbqUa

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bda3f4dd9599422dd6ea6c537862ddf2

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 30KB - Virtual size: 30KB

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 512B - Virtual size: 60B

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 512B - Virtual size: 60B