b43ef3a55913e6cdaf38d758d260d396ef50060b2b8352903839bce21f44d124

General

Target

b43ef3a55913e6cdaf38d758d260d396ef50060b2b8352903839bce21f44d124
Size

43KB
MD5

0a1446cadf1b5a1002ae127974a6600d
SHA1

ab57de41b4aec9ef219becaf14df0824a42b92cc
SHA256

b43ef3a55913e6cdaf38d758d260d396ef50060b2b8352903839bce21f44d124
SHA512

bf69f310e016135daea11c280da917b58d711fa769fa68da12ffc7784f7a139c094840a4ff654e4ac6e11aa0c8986883aebe3e5c248b7bde57460b7d22c69be8
SSDEEP

768:695fde0sDtUXO97fkkV1qm/yGBulPzmiqNoClDrC2/ieRO6M95fpp:450DtUXOFkoYmaaIPzmiKoMC2/ieR25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b43ef3a55913e6cdaf38d758d260d396ef50060b2b8352903839bce21f44d124

Files

b43ef3a55913e6cdaf38d758d260d396ef50060b2b8352903839bce21f44d124
.dll windows:4 windows x86 arch:x86

a87165eb86a2ea8b76fda3b3abd7ea7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32.tll

ExitProcess
GetProcAddress
RtlMoveMemory
lstrcpynA
LoCkRusource
LoadReqource
SizeOfResource
FindResourceA
�reateProce3sA
R5l^erMemgry
Closehandde
WriteFile
CReateF)luA
GatTempFileNameA@0ZGetTempPaphA
GetTempPaphA
GetLastError
CreateMutexa
lstrcmpiA
GetMotuleFileNameA
WahtFoRSi�glDObject
GetTickBount
GmtLocicalDrives
FindClkse
FIndNextFiLeA
SetileAptributesQ
CopyieA
GetFileAttributesA
FindF)vstFiheA
lstrcxiA
GaivNorMulti�leObjes�s
Termy�atethread
RusumeThread
SetThreadPRiority
CreatEThsdat
FreeLibra�y
SutEvmnt
CreateE�entA
DisableT(readLirraryCalls
LoadDibraryA
lstrcatA
GEtSystemDir%st�ryA

shelh32dll

ord64

[hlwapidll

PathFinnExt�nsionA
PathQppendA
PathFi~dFileFamdA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a87165eb86a2ea8b76fda3b3abd7ea7a

Headers

File Characteristics

Imports

kernel32.tll

shelh32dll

[hlwapidll

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 680B

.rsrc Size: 36KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 426B

shelh32dll

[hlwapidll

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 680B

.rsrc
Size: 36KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 426B