a50b0ff80b6883976ae464dbcf7642f9b9fd0389a250d377dd416685b712b81e

General

Target

a50b0ff80b6883976ae464dbcf7642f9b9fd0389a250d377dd416685b712b81e
Size

13KB
MD5

b301e8994e4ee6b90b877740017c0f23
SHA1

d1552423903bbbdda4cd1db251f5df3a71613b6e
SHA256

a50b0ff80b6883976ae464dbcf7642f9b9fd0389a250d377dd416685b712b81e
SHA512

a77af89d7441aab920f5aaa205ac59a0b5216513211c2d40bcdddb0616bd32675b98edee534a942eefcff9d6a0cae5db3a9f661fc53e3aec0805eb1cff59c054
SSDEEP

192:HtjumI16RzCCT3f/v6Oqttld1pBynScF5GPfCLGg4FDUnD8blQq7pWlJdxqH+nMv:15JRHTXHi7eXPQimpWlJj+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a50b0ff80b6883976ae464dbcf7642f9b9fd0389a250d377dd416685b712b81e

Files

a50b0ff80b6883976ae464dbcf7642f9b9fd0389a250d377dd416685b712b81e
.exe windows:4 windows x64 arch:x64

2b863bd28d647a152a6d5a10b7dc2500

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

memset
printf
memcpy
memmove
rand
wcslen
strcmp
srand
strtol
_wsystem
_vsnprintf
_vsnwprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

kernel32

FileTimeToSystemTime
GetProcessHeap
HeapAlloc
HeapSize
HeapReAlloc
CreateFileW
GetLastError
Sleep
WriteFile
HeapFree
CloseHandle
SleepEx
GetCommandLineW
ExpandEnvironmentStringsW

ntdll

NtQuerySystemInformation
RtlGetNtVersionNumbers

winhttp

WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCloseHandle

bcrypt

BCryptSetAuditingInterface
BCryptDestroySecret
BCryptDestroyKey
BCryptEnumAlgorithms
BCryptKeyDerivation
BCryptProcessMultiOperations
BCryptUnregisterConfigChangeNotify
BCryptResolveProviders
BCryptSignHash
BCryptVerifySignature
BCryptExportKey

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b863bd28d647a152a6d5a10b7dc2500

Headers

File Characteristics

Imports

msvcrt

kernel32

ntdll

winhttp

bcrypt

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 192B

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 192B