62dc61bb88d09b9e554ed419202a70b0751b358ebd543cfde7d60191425142f4

Sharing

Copy URL Twitter E-mail

General

Target

62dc61bb88d09b9e554ed419202a70b0751b358ebd543cfde7d60191425142f4
Size

9KB
MD5

45410285e8d9ccd43509f9db099e6da4
SHA1

ca186a60b372d204ae21139f391a8b67e1767a97
SHA256

62dc61bb88d09b9e554ed419202a70b0751b358ebd543cfde7d60191425142f4
SHA512

8d9c34129cfe758bd93ad5a629fb35f3c57d1f346215359a2a9a89921ffb6d9a0374f6abda334d757f6adafd81601b46c00ce133e7e4066187a2d3df6d065f5f
SSDEEP

192:rKUJDGggETjOIwhiWBi7E5pz6jJoZ5Uw:uGDZg+jdwhtBi7+j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62dc61bb88d09b9e554ed419202a70b0751b358ebd543cfde7d60191425142f4

Files

62dc61bb88d09b9e554ed419202a70b0751b358ebd543cfde7d60191425142f4
.exe windows:6 windows x86 arch:x86

3cba9086984273e3d93f98b42d5360c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

vcruntime140

__current_exception
memset
_except_handler4_common
__current_exception_context

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_exit
_cexit
__p___argv
_controlfp_s
terminate
_register_thread_local_exe_atexit_callback
exit
_initialize_narrow_environment
_initterm_e
_crt_atexit
_configure_narrow_argv
_c_exit
_set_app_type
_seh_filter_exe
__p___argc
_initterm
_get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cba9086984273e3d93f98b42d5360c4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 360B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 360B