9639a34684a1e1090bda91f28c3a94fc0f0ef4d83fb0b8e2c30b4d023831fee6

General

Target

9639a34684a1e1090bda91f28c3a94fc0f0ef4d83fb0b8e2c30b4d023831fee6
Size

42KB
MD5

16a6ea1d6f27650131f8340f553ff58c
SHA1

ed62d609e3bd3888213e98f4afff938d7f3c07bd
SHA256

9639a34684a1e1090bda91f28c3a94fc0f0ef4d83fb0b8e2c30b4d023831fee6
SHA512

0f394e5575b1c4c054c3d4d6fc4a6c73830208cf9eab73b613888360a495a590a51092b38705f812e46dfbd3894da5b6f162da30c4460655e46644b273e2eaae
SSDEEP

384:F9uWz8YShfKM5n7jZrbflf/F9N1YvyZ0x8X0iz69TFT9F6GQaIvfvH+uvUW4zdQJ:mZr7F/FPmvyiHWszHC3Fv54zdjeo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9639a34684a1e1090bda91f28c3a94fc0f0ef4d83fb0b8e2c30b4d023831fee6

Files

9639a34684a1e1090bda91f28c3a94fc0f0ef4d83fb0b8e2c30b4d023831fee6
.dll windows:4 windows x86 arch:x86

a4a0c2995879411cb4d6177b6c497869

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
GetCommandLineA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

GetAdviceJB

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4a0c2995879411cb4d6177b6c497869

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 1024B - Virtual size: 1000B

.data Size: 10KB - Virtual size: 15KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 1024B - Virtual size: 1000B

.data
Size: 10KB - Virtual size: 15KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB