d35c675b5c6c79155eee297262d4f921

General

Target

d35c675b5c6c79155eee297262d4f921
Size

132KB
MD5

d35c675b5c6c79155eee297262d4f921
SHA1

58c5306150f564dc5f16949c3f6a1b9b4722e276
SHA256

d3a094afdb1c52488f6ae5a065bf7555ab7238cc52fad4c1f58ae2110f7de213
SHA512

1436a03b7a3e0fe754f64dfaceb251d016acdbc1fff4de4884a935b05e10bc4ad0a8af67140e35136e527032ecf82fab6217d915b7a4132d6277b58f559c798a
SSDEEP

1536:6Iun2XRXyOs77lgtJpUF42InuknuVnToIfBlxszf6kHQy2BgwAhsOTwBu++uiVXp:nFqUp+P9TBfBlxuHQy2KzMAuiVXankl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d35c675b5c6c79155eee297262d4f921

Files

d35c675b5c6c79155eee297262d4f921
.exe windows:4 windows x86 arch:x86

b4c14607f917b802da2192bd38eac69d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Amxx_cvs\trunk\compiler\amxxpc\Release\amxxpc.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
GetLastError
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
RtlUnwind
RaiseException
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
CloseHandle
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
HeapSize
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
SetEndOfFile
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
DeleteFileA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4c14607f917b802da2192bd38eac69d

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 60KB - Virtual size: 60KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 60KB - Virtual size: 60KB