a48071756ffd1e9e5abc5ab9dad870c1aaf05a286e85737b3676dd38e71bfe26

General

Target

a48071756ffd1e9e5abc5ab9dad870c1aaf05a286e85737b3676dd38e71bfe26
Size

100KB
MD5

1a8df4f305fa957c526781453a13b880
SHA1

6e4ccc2bd21c23800cf5be22e829210b68ebca6b
SHA256

a48071756ffd1e9e5abc5ab9dad870c1aaf05a286e85737b3676dd38e71bfe26
SHA512

8342bcc5f0c324d5c16b09f18b946c1d3a5c5e9abefa61ecf95ad46540c33bbbdddcb2a9a0b030c9c9a395fa25b383538d555b08cf0227903179b9e2d1e243f9
SSDEEP

3072:91etKKBa9yWodXW6Z8MXzErLdqQnjyVgp0HFp:9krBpIrLdqg+ai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a48071756ffd1e9e5abc5ab9dad870c1aaf05a286e85737b3676dd38e71bfe26

Files

a48071756ffd1e9e5abc5ab9dad870c1aaf05a286e85737b3676dd38e71bfe26
.exe windows:4 windows x86 arch:x86

04f4e5441750431dea7d0e5ba107354c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

04f4e5441750431dea7d0e5ba107354c

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 56KB - Virtual size: 56KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 56KB - Virtual size: 56KB