d4bf8af31aac30db78ccf2e031052e26

General

Target

d4bf8af31aac30db78ccf2e031052e26
Size

210KB
MD5

d4bf8af31aac30db78ccf2e031052e26
SHA1

7f6714ae3920fc2b02d254555322ed722e883359
SHA256

bb91a158a927b0f3795444bfd304ac62f365111d192ae9d2eacc180e657ae87b
SHA512

a587e40f74757b4033297e83853e04f001ece2e06da96661d91f9dcd47555a253d1414f1886b7d93236fc50bf771462f5ea82f0d72f20510738a302168b82edd
SSDEEP

6144:3//lqZUZlTIu/acpiPqLTA8E0un1GGVwOG40mITL07O2H:v9qZUZlNSozgPdCtbxH06K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4bf8af31aac30db78ccf2e031052e26

Files

d4bf8af31aac30db78ccf2e031052e26
.exe windows:4 windows x86 arch:x86

c713e13b2f0f2797f54a4a19d60d23df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegOpenKeyW
RegSetValueW

kernel32

CreateFileA
ExitProcess
SetUnhandledExceptionFilter
SwitchToFiber

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy

user32

BeginDeferWindowPos
BeginPaint
CallWindowProcW
ChildWindowFromPoint
DeferWindowPos
DestroyCursor
EnableWindow
FillRect
GetActiveWindow
GetAsyncKeyState
GetCursorPos
GetFocus
GetMessageW
GetWindow
HideCaret
KillTimer
LoadBitmapW
LoadIconW
MapWindowPoints
OffsetRect
OpenClipboard
SetMenu
SetWindowTextW
TranslateAcceleratorW
UnregisterClassW
UpdateWindow

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c713e13b2f0f2797f54a4a19d60d23df

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 96B

.idata Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 608B

.bss Size: - Virtual size: 38KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 96B

.idata
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 608B

.bss
Size: - Virtual size: 38KB

.rsrc
Size: 2KB - Virtual size: 2KB