59a5833ecb14a44291ed518f8444170f4cf12c6fbf7c455419201a834d282f5a

General

Target

59a5833ecb14a44291ed518f8444170f4cf12c6fbf7c455419201a834d282f5a
Size

156KB
MD5

2850d31c3b5cdb427e8148460142e111
SHA1

b1d90d38961d4a989c89f1b6d23c6e892cdbb236
SHA256

59a5833ecb14a44291ed518f8444170f4cf12c6fbf7c455419201a834d282f5a
SHA512

ad46e067cf6e2c58eb4f3d501ee5c74fe3d43e618d2937fbf84da225bb46f04c405e95a4a97b81647118e07f9c7beec8b12544a9f263aed1689ca57e6bc71bda
SSDEEP

3072:QyAsgwpo6IY4+23T2YCcyNQW2yZpx+rkmN4Nkbw0i4c5CKKjiHqLg:zANwEYK3T2YCcFW2McaNgKYiHqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59a5833ecb14a44291ed518f8444170f4cf12c6fbf7c455419201a834d282f5a

Files

59a5833ecb14a44291ed518f8444170f4cf12c6fbf7c455419201a834d282f5a
.exe windows:4 windows x86 arch:x86

ea4cdac5e24d8d00e1639ef73c05ec45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetVersionExW
GetModuleHandleW
GetCurrentProcess
GetACP
GetVersionExA
GetLastError
LoadLibraryA
GetProcAddress
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetOEMCP
CompareStringW
RtlUnwind
GetStartupInfoW
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapReAlloc
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
Sleep
WideCharToMultiByte
LCMapStringA
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
SetEnvironmentVariableA

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegEnumValueA

ole32

CoReleaseMarshalData

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea4cdac5e24d8d00e1639ef73c05ec45

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 64KB - Virtual size: 61KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 76KB - Virtual size: 74KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 61KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 76KB - Virtual size: 74KB

.reloc
Size: 4KB - Virtual size: 3KB