382239c4837c34a0be4f940129fdc987cc2c05ced792e1515da37b07f75702a6

Sharing

Copy URL

Twitter E-mail

General

Target

382239c4837c34a0be4f940129fdc987cc2c05ced792e1515da37b07f75702a6
Size

50KB
MD5

0d07692dcfc0a7f76d25bba34500f2cc
SHA1

6bf30e8bc4a0c951d8b3a37b45d241afc3ecb1d8
SHA256

382239c4837c34a0be4f940129fdc987cc2c05ced792e1515da37b07f75702a6
SHA512

04653a8da503d5ebaec4f274c5e947b1da90e87296f6381c55b5a85dcfcc91703d20fe034a55682a4842d78758559ac7d2c149b9447c79b5f4cd4fb5995eff3b
SSDEEP

1536:VRvsII4Lf1PkgbWoL/WnPyNeIpUWkeF0xb6AW:DvDI4Lf1PkgbWoL/WnPyNeIpUWkeF0xI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
382239c4837c34a0be4f940129fdc987cc2c05ced792e1515da37b07f75702a6

Files

382239c4837c34a0be4f940129fdc987cc2c05ced792e1515da37b07f75702a6
.exe windows:4 windows x64 arch:x64

c44ef7d50b685b8b3b86107eb641b859

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

PDB Paths

Imports

msys-2.0

__cxa_atexit
__getreent
__main
_dll_crt0
_impure_ptr
calloc
cygwin_internal
dll_dllcrt0
exit
fprintf
free
getopt_long
malloc
msys_detach_dll
optind
posix_memalign
printf
program_invocation_short_name
realloc
setlocale
wcscasecmp
wcschr

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

kernel32

GetGeoInfoW
GetLocaleInfoW
GetModuleHandleA
GetUserGeoID

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 448B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c44ef7d50b685b8b3b86107eb641b859

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msys-2.0

advapi32

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 224B

.rdata Size: 38KB - Virtual size: 37KB

.buildid Size: 512B - Virtual size: 53B

.pdata Size: 512B - Virtual size: 204B

.xdata Size: 512B - Virtual size: 132B

.bss Size: - Virtual size: 448B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 224B

.rdata
Size: 38KB - Virtual size: 37KB

.buildid
Size: 512B - Virtual size: 53B

.pdata
Size: 512B - Virtual size: 204B

.xdata
Size: 512B - Virtual size: 132B

.bss
Size: - Virtual size: 448B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB