2108495d2ae8c4ef5dd1e7f5c31fd0451432703bb636f7a65cafaf424f44b11cN

General

Target

2108495d2ae8c4ef5dd1e7f5c31fd0451432703bb636f7a65cafaf424f44b11cN
Size

27KB
MD5

413a60bdac5bca4638b00101493e5710
SHA1

231fff44a41307729e45e2312468d608e82a6412
SHA256

2108495d2ae8c4ef5dd1e7f5c31fd0451432703bb636f7a65cafaf424f44b11c
SHA512

f8822807d7ae66d907f86f673fc38db5b673016fe91e610c575f93f2f5bb7478d8d5b236738d4cf30def46dbcba35d10940232e04a6ac86cdf9244abc9ff6c58
SSDEEP

384:bTFRB2YzCoSDN0Qof1mQi0/6TH4xSE+MDldB2SDRT47R7P:9Rcx0Qyxa40o7BZDREdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2108495d2ae8c4ef5dd1e7f5c31fd0451432703bb636f7a65cafaf424f44b11cN

Files

2108495d2ae8c4ef5dd1e7f5c31fd0451432703bb636f7a65cafaf424f44b11cN
.exe windows:4 windows x86 arch:x86

ffb81b49b1a2abfe8b67fe4ff6a7a606

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
ReadConsoleInputA
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetCommandLineA
GetVersion
CreateFileA
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
GetFileAttributesA
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetConsoleMode
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
HeapCreate
WriteFile
HeapAlloc
SetFilePointer
HeapFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffb81b49b1a2abfe8b67fe4ff6a7a606

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 1024B - Virtual size: 1000B

.data Size: 3KB - Virtual size: 8KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 1024B - Virtual size: 1000B

.data
Size: 3KB - Virtual size: 8KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB