d016795bfe58ba4db5bf1815ffe36c1cb8c09e0aa624f488e217a56e46d78e59

General

Target

d016795bfe58ba4db5bf1815ffe36c1cb8c09e0aa624f488e217a56e46d78e59
Size

440KB
MD5

1383a17ec2dc7115d57f213be81d11dd
SHA1

42133f5f7a8370c48c0af99bd2c53d86ab4827ce
SHA256

d016795bfe58ba4db5bf1815ffe36c1cb8c09e0aa624f488e217a56e46d78e59
SHA512

ea6f771b27fa357082538b250ce8614f9b2204972039dc1a1bd9b3b453d669e8b1ab124b91ba6af073fcba41ba5d9159d8d52d8f5fd9ba0586354388850f65ed
SSDEEP

6144:bDVbCApPIVdlez8i/AeetQDgirv6bpogIBrzq3Q7bAVY3eYsBjqYwayJPgvBHaIw:nVuoPmd8z86zxrc0xzqU3aBjBz8PgQS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d016795bfe58ba4db5bf1815ffe36c1cb8c09e0aa624f488e217a56e46d78e59

Files

d016795bfe58ba4db5bf1815ffe36c1cb8c09e0aa624f488e217a56e46d78e59
.exe windows:4 windows x86 arch:x86

f2163c02bc78afc8a38bb13e92237a71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
VirtualFree
WriteFile
SetEvent
GetModuleHandleA
GetProcAddress
SetWaitableTimer
GetLastError
CreateThread
GetLocalTime
LoadLibraryA
InterlockedExchange
CloseHandle
SetFilePointer
LCMapStringW
LCMapStringA
FlushFileBuffers
ReadFile
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapValidate
IsBadReadPtr
IsBadWritePtr
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
MultiByteToWideChar
SetStdHandle

user32

SendInput
LoadStringA
PostMessageA
PeekMessageA
LoadCursorA
SetWindowTextA
SetFocus
EnumWindows
EnableWindow
GetClientRect

wininet

HttpOpenRequestA

winmm

joySetCapture
waveInClose

msacm32

acmFormatEnumA

Exports

Exports

?JUMP@@YIKKK@Z

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 356KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2163c02bc78afc8a38bb13e92237a71

Headers

File Characteristics

Imports

kernel32

user32

wininet

winmm

msacm32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 356KB - Virtual size: 360KB

.rsrc Size: 16KB - Virtual size: 369KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 356KB - Virtual size: 360KB

.rsrc
Size: 16KB - Virtual size: 369KB