d350709be85cab9b1f112530541afb2f

General

Target

d350709be85cab9b1f112530541afb2f
Size

320KB
MD5

d350709be85cab9b1f112530541afb2f
SHA1

04fadd3175cba341c0a1a2efdb425788eaf66b95
SHA256

48260b4e9ecbee92e4c467de79f84b6466985387636d688f35eb930c6a8f1d07
SHA512

8efc106621c0ee793c0852fd8875e741af3dac2be01dfb9010daf563220fb33ca2c9226f7d691631407ffe5bfa706479bf261dd0915ccc515b51ba296e4e13c1
SSDEEP

6144:m+4Xid6tGhNubOvIowXKWCx5OVprYOaFJI1C/ssFjaS9YtF:0tGnvwLCx5OTAc1Qxl0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d350709be85cab9b1f112530541afb2f

Files

d350709be85cab9b1f112530541afb2f
.exe windows:4 windows x86 arch:x86

8dcacaad45a1a52801345299958ad644

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

k:\FileBase\Yilin\works\RP\SecurityPrograms\Projects\Emails\EmailBot\Final\Bot\Release\WmUpdate.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetLastError
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
InitializeCriticalSection
MultiByteToWideChar
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
SetEnvironmentVariableA

user32

PostQuitMessage
DefWindowProcA
CreateWindowExA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8dcacaad45a1a52801345299958ad644

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 244KB - Virtual size: 240KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 12KB - Virtual size: 19KB

.text
Size: 244KB - Virtual size: 240KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 12KB - Virtual size: 19KB