44fd62f092049821eec87dec75d887bf11c43d6937d608e91fde0f08e6e414a7

General

Target

44fd62f092049821eec87dec75d887bf11c43d6937d608e91fde0f08e6e414a7
Size

2.7MB
MD5

aa3d11c2cb6cb0c7a915710a276d7dea
SHA1

7bb8626aa50b2f224ca0b41f86dfd5df31e73b4f
SHA256

44fd62f092049821eec87dec75d887bf11c43d6937d608e91fde0f08e6e414a7
SHA512

6b50c6aa084e8532e7e74365f6efdf86e7ec64e84bd0b2577025158820774fb0d6569c9e2295daf5f25b67e3741e17e141a9714111b08b78aab372422b46cd89
SSDEEP

49152:ulfqePXwjMqcDP1Ne13ZzCBlfhm/5MTlNTbfq2jur9Xqv4pDtp/7LQ8HVDwgLRD1:TePXwXcDPYCBlfhm+l1Dq2w6gJzbHVDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44fd62f092049821eec87dec75d887bf11c43d6937d608e91fde0f08e6e414a7

Files

44fd62f092049821eec87dec75d887bf11c43d6937d608e91fde0f08e6e414a7
.exe windows:4 windows x86 arch:x86

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 404KB - Virtual size: 769KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 1.5MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

2
Size: 420KB - Virtual size: 979KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4
Size: 48KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 404KB - Virtual size: 769KB

1 Size: 1.5MB - Virtual size: 3.2MB

2 Size: 420KB - Virtual size: 979KB

3 Size: 8KB - Virtual size: 7KB

4 Size: 48KB - Virtual size: 71KB

5 Size: 4KB - Virtual size: 3KB

6 Size: 8KB - Virtual size: 28KB

0
Size: 404KB - Virtual size: 769KB

1
Size: 1.5MB - Virtual size: 3.2MB

2
Size: 420KB - Virtual size: 979KB

3
Size: 8KB - Virtual size: 7KB

4
Size: 48KB - Virtual size: 71KB

5
Size: 4KB - Virtual size: 3KB

6
Size: 8KB - Virtual size: 28KB