880ddc0a83a1bd12c21a6ba563d2a961fc9707a9de05da6b655933da5f3076d3

General

Target

880ddc0a83a1bd12c21a6ba563d2a961fc9707a9de05da6b655933da5f3076d3
Size

424KB
MD5

9e76d36422ad84e89bd73a80d4d37323
SHA1

b0b595ef86a455839b2c01f4e00e5c41f587d263
SHA256

880ddc0a83a1bd12c21a6ba563d2a961fc9707a9de05da6b655933da5f3076d3
SHA512

814ae62a2001dd303a86b1ecec8b8ee20d9d2aed8db1a7ba15b2d824d31d13fb948962a68f0ffbbc9e8975eac9c6063f9314426310a2b7256876e851165e8bcc
SSDEEP

1536:RYJ0wH27gXoOoqlMegEm+OvD5a2IznYaHju:RYywH27UoOMoOr5a2Issa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880ddc0a83a1bd12c21a6ba563d2a961fc9707a9de05da6b655933da5f3076d3

Files

880ddc0a83a1bd12c21a6ba563d2a961fc9707a9de05da6b655933da5f3076d3
.exe windows:4 windows x86 arch:x86

6e4b5131accc19c13852d3bfa104dadf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WriteFile
LoadLibraryExW
GetProcAddress
GetModuleHandleW
CreateEventW
GetModuleHandleA
SetEvent
VirtualAlloc
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCurrentThread
Sleep
LCMapStringA
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CloseHandle

user32

SendMessageW
ReleaseDC
LoadCursorA

gdi32

SelectObject

winmm

auxSetVolume

ws2_32

select

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e4b5131accc19c13852d3bfa104dadf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winmm

ws2_32

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 28KB - Virtual size: 32KB

.rsrc Size: 44KB - Virtual size: 42KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 28KB - Virtual size: 32KB

.rsrc
Size: 44KB - Virtual size: 42KB

.shell
Size: 320KB - Virtual size: 320KB