90fa96d97979c39807133c7b1e50c896ed6f909cc0b00c907b5ce638a0a2beef

General

Target

90fa96d97979c39807133c7b1e50c896ed6f909cc0b00c907b5ce638a0a2beef
Size

169KB
MD5

f8567e1acb1a5e256e07630f64fb7cd2
SHA1

759bb7a1c7b8affa657bf62a87ded4d26dd7ef80
SHA256

90fa96d97979c39807133c7b1e50c896ed6f909cc0b00c907b5ce638a0a2beef
SHA512

d95d5f98e55ea3dbfab10bb9354c760dd15925aa71f720421168291336bfe7dfb72378281c9d0fe7e34f64ff7555901d7b3987da80c727d0f422419c8cbeccb6
SSDEEP

3072:qlnLPV0bgNVZ7lZimggJ57lyrEquWN5tQ57ziAx5ClB:qlh0MimB5IELSGOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90fa96d97979c39807133c7b1e50c896ed6f909cc0b00c907b5ce638a0a2beef

Files

90fa96d97979c39807133c7b1e50c896ed6f909cc0b00c907b5ce638a0a2beef
.exe windows:4 windows x86 arch:x86

55dd31bf44ae1e8d52c0271ddd5140c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

UnhandledExceptionFilter
InterlockedIncrement
GetFullPathNameW
HeapSize
GetThreadPriority
Sleep
CreateFileA
GetCurrentThreadId
GetCurrentDirectoryW
LeaveCriticalSection
WriteConsoleA
WriteFile
SetUnhandledExceptionFilter
GetModuleFileNameW
IsDebuggerPresent
RaiseException
SetCommConfig
MultiByteToWideChar
TerminateProcess
LCMapStringW
WideCharToMultiByte
HeapReAlloc
EnumResourceNamesA
WriteConsoleW
ExitProcess
HeapFree
GetUserDefaultLCID
GetCommandLineA
EnterCriticalSection
GetCurrentProcess
GetLocaleInfoW
CloseHandle
HeapAlloc
DeleteCriticalSection
GlobalAlloc
IsValidCodePage
SetStdHandle
GetLastError
ExitProcess
GetConsoleOutputCP
GetCPInfo
GetProcAddress
SetEndOfFile
RtlUnwind
InitializeCriticalSection
GetVersionExA
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
ReadFile
InterlockedDecrement
LCMapStringA
GetProcessHeap
GetFullPathNameA

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55dd31bf44ae1e8d52c0271ddd5140c6

Headers

File Characteristics

Imports

user32

rpcrt4

shell32

kernel32

advapi32

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 20KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 20KB

.crt
Size: 512B - Virtual size: 68KB