433b54841d1a1753e905665134d1c077af3f6b7b2360803212ac028f4548f43a

General

Target

433b54841d1a1753e905665134d1c077af3f6b7b2360803212ac028f4548f43a
Size

11KB
MD5

67082c4066fdb321fb18a0c5be13c56b
SHA1

fe3f0f35f80337ef4fc8766f85c4b4ad4d895b58
SHA256

433b54841d1a1753e905665134d1c077af3f6b7b2360803212ac028f4548f43a
SHA512

c8cec6875c29cd27bd7db79e648437fa4564da858eaff1accb4508b57693e1c15385ec3ec7519f1789e813a150a77e1842f38c471f52da418b01c5a166014c90
SSDEEP

192:Sdju2/PjaPvHxa5OLyVCwN8GCaJAlAwnEA:SX/biHxaDhM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
433b54841d1a1753e905665134d1c077af3f6b7b2360803212ac028f4548f43a

Files

433b54841d1a1753e905665134d1c077af3f6b7b2360803212ac028f4548f43a
.exe windows:1 windows x86 arch:x86

fe11371daa6d79e5f804a707094b9fd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateToolhelp32Snapshot
ExitProcess
Process32First
Process32Next
ReadFile
SetFilePointer
Sleep
WriteFile

user32

CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageW
GetDC
GetFocus
GetMessageA
GetWindowTextA
LoadCursorFromFileA
LoadIconW
LoadImageA
MessageBoxA
PostQuitMessage
RegisterClassA
ReleaseDC
SendMessageW
SetWindowRgn
SetWindowTextA
ShowWindow
SystemParametersInfoW
TrackMouseEvent
TranslateMessage

gdi32

BitBlt
CombineRgn
CreateCompatibleDC
CreatePatternBrush
CreateRectRgn
DeleteDC
DeleteObject
SelectObject

shell32

ShellExecuteA

ws2_32

WSACleanup
WSAStartup
closesocket
htons
inet_addr
recvfrom
sendto
socket

Sections

.flat
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe11371daa6d79e5f804a707094b9fd0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ws2_32

Sections

.flat Size: 512B - Virtual size: 362B

.text Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.flat
Size: 512B - Virtual size: 362B

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB