218031bb6ded4f731a56ee5fbad7114d624b5a1398e75852867cbfb9c25840ff

General

Target

218031bb6ded4f731a56ee5fbad7114d624b5a1398e75852867cbfb9c25840ff
Size

93KB
MD5

08ccd87edb5d1f8fee71f4dd433094a7
SHA1

ccd7205273264a9137c452c405089c738ec9a361
SHA256

218031bb6ded4f731a56ee5fbad7114d624b5a1398e75852867cbfb9c25840ff
SHA512

60e018f13f134efeb9adcb9e37033877adc62c59e10a068d57612d23e8cdcdedb636bcb025df5619fdda4b9713a4ba5e160c977d44425fb7639078122b99dd8e
SSDEEP

1536:O/Uow3+Ju2TdkRe/dGZ+1kXoGSlKUza8a+9dAjR9CjIoXYQx+NoM:Fow3+029d5blhL9dAjRMjIoXYQx+yM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
218031bb6ded4f731a56ee5fbad7114d624b5a1398e75852867cbfb9c25840ff

Files

218031bb6ded4f731a56ee5fbad7114d624b5a1398e75852867cbfb9c25840ff
.exe windows:4 windows x86 arch:x86

b2f117cc226253011f72f8eb11dd9034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA
BroadcastSystemMessageA
SendMessageA
MessageBoxA

kernel32

WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
GetCurrentThreadId
CreateEventA
SetEvent
OpenProcess
Sleep
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetStdHandle
GetConsoleScreenBufferInfo
CreateFileA
ReadConsoleOutputCharacterA
ReadConsoleOutputAttribute
ReadConsoleOutputA
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
DeleteFileA
MoveFileA
SetFilePointer
GetFileSize
CreateFileA
SetEndOfFile
GetFileType
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2f117cc226253011f72f8eb11dd9034

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 50KB - Virtual size: 49KB

.data Size: 1024B - Virtual size: 1008B

.bss Size: - Virtual size: 260KB

.idata Size: 1KB - Virtual size: 1KB

.stab Size: 1KB - Virtual size: 1KB

.stabstr Size: 1KB - Virtual size: 1KB

.text
Size: 50KB - Virtual size: 49KB

.data
Size: 1024B - Virtual size: 1008B

.bss
Size: - Virtual size: 260KB

.idata
Size: 1KB - Virtual size: 1KB

.stab
Size: 1KB - Virtual size: 1KB

.stabstr
Size: 1KB - Virtual size: 1KB