665d5ff1c5c2a424174caa569734a0934d68c3ea979bf8436de77cc4be32c04b

General

Target

665d5ff1c5c2a424174caa569734a0934d68c3ea979bf8436de77cc4be32c04b
Size

45KB
MD5

352be10c9364ea17abfe54229232e39b
SHA1

d5915c3449706b4a6adc9305c32eca44b608810b
SHA256

665d5ff1c5c2a424174caa569734a0934d68c3ea979bf8436de77cc4be32c04b
SHA512

49db72809e328118604ef1e3f578e670c6a11d3c10bf53e829aff1ed6a86883ec66f90e0ccaa0c10d624a9f83ee3b425ddb7f841489bdb2f1a7da44676be87fc
SSDEEP

768:dqhIiFw42c9Nm4puWHfSG8fzBc9DU73gMguEQjaByt3kRqtA:d8j242cozBj73euEN238cA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665d5ff1c5c2a424174caa569734a0934d68c3ea979bf8436de77cc4be32c04b

Files

665d5ff1c5c2a424174caa569734a0934d68c3ea979bf8436de77cc4be32c04b
.exe windows:4 windows x86 arch:x86

3443450a10d6d557144798ae521a009f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetWindowTextA
DefWindowProcA
SetTimer
KillTimer
PostQuitMessage
FindWindowA
GetWindowThreadProcessId
EnumWindows
SendMessageA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetModuleFileNameA
UnhandledExceptionFilter
ReadFile
SetEndOfFile
SetFilePointer
LoadLibraryA
GetProcAddress
CreateFileA
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapAlloc
WriteFile
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetStdHandle
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 943B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3443450a10d6d557144798ae521a009f

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 1024B - Virtual size: 943B

.data Size: 5KB - Virtual size: 9KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 1024B - Virtual size: 943B

.data
Size: 5KB - Virtual size: 9KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 18KB - Virtual size: 21KB