160c62aa18ce464fde57c57c476c264d2194b02f7865a809e38cdd11513323dc

General

Target

160c62aa18ce464fde57c57c476c264d2194b02f7865a809e38cdd11513323dc
Size

35KB
MD5

a0ee9fc548d79f4cd06368e6b24b12f3
SHA1

946582905cfee4e2eeee71ed8f55e6493825c816
SHA256

160c62aa18ce464fde57c57c476c264d2194b02f7865a809e38cdd11513323dc
SHA512

2ae1e9bfa5cc912bc2e441fe162825cf9bad3d704502aed55b4817bbda561afc33f69f0c67832b5f41d7970c479ab4fdc07501f2ed02c878b677f84ec6e62210
SSDEEP

384:NNlfVRYTJj+hq9e+6fNFGKf9u5QUw4N+z3o1+cOvRvst:NzXwaq9e99u5Qgk2t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160c62aa18ce464fde57c57c476c264d2194b02f7865a809e38cdd11513323dc

Files

160c62aa18ce464fde57c57c476c264d2194b02f7865a809e38cdd11513323dc
.exe windows:4 windows x86 arch:x86

326b80753d2d095b727d05344779431b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CopyFileA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
Sleep
WinExec

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
ctime
fclose
fflush
fopen
fprintf
fputs
fread
free
fseek
ftell
malloc
memset
signal
sprintf
strcat
strcmp
strcpy
strlen
strncmp
time

user32

GetAsyncKeyState
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetWindowTextA

ws2_32

WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
socket

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

326b80753d2d095b727d05344779431b

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

ws2_32

Sections

.text Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB