5c57c450292e8771e497b61d623173560098a8bf6dcf8e8988510b02126b4f77

General

Target

5c57c450292e8771e497b61d623173560098a8bf6dcf8e8988510b02126b4f77
Size

703KB
MD5

e8963830a7d80a4e6070426360bfc27f
SHA1

31d9b1a61258f7dbd84de08ebe87a0d0c8603389
SHA256

5c57c450292e8771e497b61d623173560098a8bf6dcf8e8988510b02126b4f77
SHA512

f4de97dd63bbdb01c9c020c159a20214ee8b63d6854f28c2547c91860921db51a152776af1244d33966014b5dfce9680dee3deab72acfa5549504f0d3c038bd4
SSDEEP

12288:m7xeDAHn8fhTcTAgAqQABAKh23EymZmpkQTb+5srXIG9hTypMXDFzuXYNEywN5Zi:jMAhoTRSKAJm0kQnEsrXZbTLzqeyNvT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c57c450292e8771e497b61d623173560098a8bf6dcf8e8988510b02126b4f77

Files

5c57c450292e8771e497b61d623173560098a8bf6dcf8e8988510b02126b4f77
.exe windows:5 windows x86 arch:x86

f5ec35e6a0d5a94dc396c67a7d2a03be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
EnumResourceNamesA
HeapAlloc
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetCurrentThread
GetProcAddress
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
HeapReAlloc

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 529KB - Virtual size: 529KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5ec35e6a0d5a94dc396c67a7d2a03be

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 529KB - Virtual size: 529KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 529KB - Virtual size: 529KB

.reloc
Size: 7KB - Virtual size: 6KB