deae975f30f41943a66babca86ea0b47

General

Target

deae975f30f41943a66babca86ea0b47
Size

3.4MB
MD5

deae975f30f41943a66babca86ea0b47
SHA1

67fc6454a4da29b133988ec253b2c7e0f442d1b0
SHA256

1c3c5ffc3776ae4431cd7a4ee15c974bc20242ace6a5e901285858593895336f
SHA512

b42a0267c190e5f4c0c22f5cbcd32897d00b51c543506067c126bea0bfa6bd55ca393d114ef66a8e9814b530580a88a8fe318762c00c83bcfae2db47bc98c2c2
SSDEEP

98304:XJFUlmTj3Ot/vrI6mpuYWov4ZpsP8Wu12a03eo:5FsggrI5puYWoSskI8o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deae975f30f41943a66babca86ea0b47

Files

deae975f30f41943a66babca86ea0b47
.exe windows:4 windows x86 arch:x86

8a3591f1b696fbbcb31021c4556650ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentProcess
CloseHandle
TerminateProcess
GetTickCount
HeapFree
HeapAlloc
LocalFree
DeleteCriticalSection
GetProcessHeap
GetStdHandle
ReadFile
SetEvent
GetACP
FormatMessageW
GetFileType
TlsGetValue
HeapReAlloc
GetConsoleMode
FlushFileBuffers
TlsSetValue
HeapSetInformation
HeapSize
WriteConsoleW
LoadLibraryExW
CreateThread
TlsFree
GetFileAttributesW
RtlUnwind
LCMapStringW
InitializeCriticalSectionAndSpinCount
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
FindNextFileW
DeleteFileW
VirtualAlloc
GetConsoleCP
LocalAlloc
DecodePointer
ResetEvent
GetVersionExW
ReleaseMutex
OutputDebugStringW
EncodePointer
lstrlenW
LoadLibraryA
GetModuleHandleExW
CreateDirectoryW
UnmapViewOfFile
CreateProcessW

user32

LoadStringW
ReleaseDC
MessageBoxW
PostQuitMessage
CreateWindowExW
GetSystemMetrics
GetDC
PostMessageW
SendMessageW
GetClientRect
SetWindowPos
EnableWindow
IsWindow
LoadCursorW
EndDialog
SetWindowTextW
SetTimer
LoadIconW
SetFocus
SetForegroundWindow
GetSysColor
PeekMessageW
BeginPaint
ScreenToClient
SetCursor
EnableMenuItem
GetWindowTextW
UpdateWindow
CharUpperW
ClientToScreen

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a3591f1b696fbbcb31021c4556650ea

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.idata Size: 2KB - Virtual size: 1KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 1KB