0510fcf0732344e458e8af39da9507a1998956bcbfd4e89521db97dcad344fdc

General

Target

0510fcf0732344e458e8af39da9507a1998956bcbfd4e89521db97dcad344fdc
Size

88KB
MD5

bca75873f0eeaa018ed69696fd1b89db
SHA1

90ce652e77360267a2e2d06ae2a6031d73aeb406
SHA256

0510fcf0732344e458e8af39da9507a1998956bcbfd4e89521db97dcad344fdc
SHA512

459a7b1a29bdffbd1bf0487dd5772737e3d4d6f1c18dd3b3fe4886c5811519dcd861380180d1bd4dde07c5e503d66de3388bae790f7d99b30c6c2ff944fd3a4d
SSDEEP

1536:M1EOjHNt947v64a9lO790iCwmp3ozHr90naBBUPY+AmbH2Z:M1EOrD94KO7QSzHrmQ4tA9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0510fcf0732344e458e8af39da9507a1998956bcbfd4e89521db97dcad344fdc

Files

0510fcf0732344e458e8af39da9507a1998956bcbfd4e89521db97dcad344fdc
.exe windows:4 windows x86 arch:x86

512ed84d24632fda84935f5cd84afade

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
DeviceIoControl
Sleep
GetLastError
GetModuleHandleA
GetCommandLineA
CloseHandle

mfc42

ord825
ord800
ord2818
ord540
ord561
ord815
ord1575

msvcrt

exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_onexit
__dllonexit
??1type_info@@UAE@XZ
printf
_CxxThrowException
__CxxFrameHandler
_exit

msvcp60

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

512ed84d24632fda84935f5cd84afade

Headers

File Characteristics

Imports

kernel32

mfc42

msvcrt

msvcp60

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 392B

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 392B

.rsrc
Size: 72KB - Virtual size: 72KB