682b53b6f000901719201cc55f2f083d5aca443714699b66db5449d6e3a372ccN

General

Target

682b53b6f000901719201cc55f2f083d5aca443714699b66db5449d6e3a372ccN
Size

71KB
MD5

556d6293d24218d9aca08afa4bc64bf0
SHA1

0321f39d11030a8628aed164fae6cd251c250554
SHA256

682b53b6f000901719201cc55f2f083d5aca443714699b66db5449d6e3a372cc
SHA512

c540866cc2e3bb4485be896ea81613fa801ea751bb1a11e8bf2f9d6479a133019a09e74cefb0d3426e46d4134ad00c06ad0b4c0f792b5ad95f73394639b6ce46
SSDEEP

1536:R9eJwzFpigfEO01ms+GgHbJgCYwYsWVcdIFG0KWJ:R+Ei8NmmsxgHSH+IFG/WJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682b53b6f000901719201cc55f2f083d5aca443714699b66db5449d6e3a372ccN

Files

682b53b6f000901719201cc55f2f083d5aca443714699b66db5449d6e3a372ccN
.exe windows:5 windows x86 arch:x86

02263373ca58f2c94a03ca3ef0e88378

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

user32

GetInputState
PostThreadMessageA
GetMessageA

kernel32

WideCharToMultiByte
DecodePointer
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
CreateMutexA
GetCurrentThreadId
Sleep
GetLastError
LoadLibraryA
GetProcAddress
GetExitCodeProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
FlushFileBuffers
RtlUnwind
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
CreateFileW
GetStdHandle
WriteFile
GetACP
HeapAlloc
LCMapStringW
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileType
CloseHandle
SetStdHandle
GetStringTypeW
HeapSize
HeapReAlloc

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02263373ca58f2c94a03ca3ef0e88378

Headers

DLL Characteristics

File Characteristics

Imports

shell32

user32

kernel32

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 648B

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 648B