d79c024ae84105a4075e79558b656d1e4d9a724cd96b0e02458a697ac4442925

Sharing

Copy URL Twitter E-mail

General

Target

d79c024ae84105a4075e79558b656d1e4d9a724cd96b0e02458a697ac4442925
Size

54KB
MD5

d1b85647552ae7015c86a3e7f3dcf299
SHA1

2734da3f41fa96bbf5e2a96eb59d845407c3fd1a
SHA256

d79c024ae84105a4075e79558b656d1e4d9a724cd96b0e02458a697ac4442925
SHA512

ee0d672afbf99fd1a6d331de93fed49ae0fa69229978860935765ba42f8438ba44b3c52443eb668ab894657e53bedcd51afdc4b1248efe0060c5d393f252893b
SSDEEP

768:pTCMS+UgnHBAOzabk1HGpJp2zivXDeoGnPChclbN3u9A:YIEQHGGLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d79c024ae84105a4075e79558b656d1e4d9a724cd96b0e02458a697ac4442925

Files

d79c024ae84105a4075e79558b656d1e4d9a724cd96b0e02458a697ac4442925
.exe windows:4 windows x86 arch:x86

89bddfc250b5d33660524f8fd0644781

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FreeResource
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
WaitForSingleObject
WideCharToMultiByte
WriteFile

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen

user32

CharLowerBuffW
CharUpperBuffW
MessageBoxA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 512B - Virtual size: 156B

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 512B - Virtual size: 138B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

89bddfc250b5d33660524f8fd0644781

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 25KB - Virtual size: 25KB

.data Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 4B

.idata Size: 2KB - Virtual size: 1KB

.stab Size: 512B - Virtual size: 156B

.stabstr Size: 512B - Virtual size: 138B

.text
Size: 25KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 2KB - Virtual size: 1KB

.stab
Size: 512B - Virtual size: 156B

.stabstr
Size: 512B - Virtual size: 138B