d68cc8355a980a9aa270cd8227baacd4

General

Target

d68cc8355a980a9aa270cd8227baacd4
Size

149KB
MD5

d68cc8355a980a9aa270cd8227baacd4
SHA1

6bd7d48f30303bf04eee5e60ccf9e72d56cb4a63
SHA256

59a86d71fd99fe6e46c635f799648a0c7b412fe0bdaec8682acd89d17cbe3a89
SHA512

5f14e10aaa8911a084b6e408f08a19ff676bda2b1aec537bca89f26ce7529c4fd88eb0079aa28854d217a5f6bfd74404c7a914687e97237fb3721906ecdb42cb
SSDEEP

3072:GgDCrI6c6gYMb2tzOne280DuOPuHbuVI0IHd9nA6XJ16Y6k8po/kG6Kon:ZDCTet2tY80DuOm7GIBH7ASJ1r6viU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d68cc8355a980a9aa270cd8227baacd4

Files

d68cc8355a980a9aa270cd8227baacd4
.exe windows:4 windows x86 arch:x86

3528914b40045571ca369395b4a19bf3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetCPInfoExW
GetProcessHeaps
OpenWaitableTimerA
GetModuleHandleA
LocalFree
SetFileApisToOEM
GetExitCodeThread
WriteConsoleOutputA
LCMapStringA
GetLocaleInfoA
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW

user32

IsCharUpperA
FlashWindow
DefWindowProcA
DdeConnectList
PostMessageW
GetKeyboardLayoutNameA
GetWindowInfo

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3528914b40045571ca369395b4a19bf3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 113KB - Virtual size: 113KB

.data Size: 4KB - Virtual size: 72KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 113KB - Virtual size: 113KB

.data
Size: 4KB - Virtual size: 72KB