989a17a1865f5370aad2e503864fdd3b1d662cebeff9d4e06680ab36f76b7a97

General

Target

989a17a1865f5370aad2e503864fdd3b1d662cebeff9d4e06680ab36f76b7a97
Size

8.7MB
MD5

4d72d9721f66cf8ca12d4ed307640317
SHA1

8d26f1aec0341b34f38be3434142a9589e55bcc0
SHA256

989a17a1865f5370aad2e503864fdd3b1d662cebeff9d4e06680ab36f76b7a97
SHA512

1dcfe1893d08b58c9b04d3b86e62ad17fb52dc0b3b7fe0eba72f886272f4e8dbb574cbd90820684b2f653251de0908145d19d35bde7112c8999696c246da6ff6
SSDEEP

196608:5bIUkvpb1nBrvnViWOsHiQPUMxUM7uWaBa8ja1Wn0+7N5SVVBkn4n3bUIKoNL1g:xdkRPvhoQCtWaBVW1W0+7/SyeDxs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
989a17a1865f5370aad2e503864fdd3b1d662cebeff9d4e06680ab36f76b7a97

Files

989a17a1865f5370aad2e503864fdd3b1d662cebeff9d4e06680ab36f76b7a97
.exe windows:5 windows x64 arch:x64

0f3107c46000e57f2a05d633a6abd8e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxA

shell32

ShellExecuteExW

msvcrt

?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__getmainargs
memcpy
malloc
free
wcscmp
memset
strlen
memcmp
memmove
_ismbblead

kernel32

GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
GetVersion
GetProcAddress
GetSystemDirectoryW
GetModuleHandleW
LoadLibraryExW
CreateFileW
ReadFile
WriteFile
SetFilePointer
SetFileAttributesW
lstrcpyW
GetCurrentProcessId
DeleteFileW
CloseHandle
GetCurrentThreadId
FindNextFileW
lstrcatW
RemoveDirectoryW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
GetLastError
GetTempPathW
GetCommandLineW
FindFirstFileW
CreateProcessW
CreateDirectoryW
WaitForSingleObject
SetFileTime
GetExitCodeProcess
GetModuleFileNameW
lstrlenW

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f3107c46000e57f2a05d633a6abd8e0

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

msvcrt

kernel32

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 8KB

.pdata Size: 1024B - Virtual size: 780B

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 8KB

.pdata
Size: 1024B - Virtual size: 780B

.rsrc
Size: 8KB - Virtual size: 7KB