109555288c500a4a60dbc2471dd1808b7ef7aaf73566acb6dbf4f830d9edd333

General

Target

109555288c500a4a60dbc2471dd1808b7ef7aaf73566acb6dbf4f830d9edd333
Size

16.6MB
MD5

4113bce8ba30ebef58c038b968cd80cd
SHA1

884e69a6828b39b9e5f0dfc0ce163c5f26c3f956
SHA256

109555288c500a4a60dbc2471dd1808b7ef7aaf73566acb6dbf4f830d9edd333
SHA512

68e51f45d8c7f149bf0cfd098a8e43136a21212248dde2b7d404a46df77d0b5f7390e3195f6c5a5f8160da936d6596b70e9cbc1cc39097be655a5e1bdbc7e921
SSDEEP

393216:9LQq+4kdYXXMmtHw5I9bIAeJ3zJilTphDVOcjX2TEmENNW2Tb:X8YXFHw5I5Alol9hxtXoBENY0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
109555288c500a4a60dbc2471dd1808b7ef7aaf73566acb6dbf4f830d9edd333

Files

109555288c500a4a60dbc2471dd1808b7ef7aaf73566acb6dbf4f830d9edd333
.exe windows:6 windows x86 arch:x86

6b4e13bd20f34de2fb665221f4db8af5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
Sleep
GetCurrentProcess
CreateThread
GetSystemTimeAsFileTime
GetProcAddress
LoadResource
SizeofResource
LoadLibraryA
FindResourceA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcessId
TerminateProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentThreadId
InitializeSListHead

ucrtbase

_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
free
terminate
_controlfp_s
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
__setusermatherr
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
malloc
_callnewh
rand_s
_invalid_parameter_noinfo_noreturn
_set_fmode
_except_handler4_common
__current_exception_context
__current_exception
memset
memmove
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memcpy
exit

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b4e13bd20f34de2fb665221f4db8af5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ucrtbase

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 944B

.rsrc Size: 463KB - Virtual size: 463KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 944B

.rsrc
Size: 463KB - Virtual size: 463KB