235d3eac237cf160dec77ccabde68bb9163754c49f27a594682b6c9b4a1a5bc5

General

Target

235d3eac237cf160dec77ccabde68bb9163754c49f27a594682b6c9b4a1a5bc5
Size

53KB
MD5

e1e50b6dcbec9560e918f90a09f308b9
SHA1

385538d0d6fc7451c564ebb062028df58f7da13b
SHA256

235d3eac237cf160dec77ccabde68bb9163754c49f27a594682b6c9b4a1a5bc5
SHA512

2d5cad6b232ab93152ea88f605cd60817f5524e9e2c447605c1b17774fc1937c0a4efd864d6c38c123c42b75814f76f72d0fd570e7c7a746f1ad6eea3e6b647a
SSDEEP

1536:jWSzK5zFIq3BYgEqRml0yGhIO9VnToIf:jZW5zvBElli99TBf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
235d3eac237cf160dec77ccabde68bb9163754c49f27a594682b6c9b4a1a5bc5

Files

235d3eac237cf160dec77ccabde68bb9163754c49f27a594682b6c9b4a1a5bc5
.exe windows:5 windows x86 arch:x86

f575644360a5933cf90c110d8b4996e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\zlib-1.2.7\minigzip.pdb

Imports

msvcr100

_errno
memset
memcpy
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
strerror
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
sprintf
wcstombs
_wopen
free
malloc
_lseeki64
strrchr
fopen
fwrite
fread
ferror
perror
fclose
__iob_func
fprintf
__setusermatherr
exit
_unlink
_setmode
_fileno
_open
_write
_close
_read

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f575644360a5933cf90c110d8b4996e5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr100

kernel32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 984B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 984B

.reloc
Size: 1KB - Virtual size: 1KB