5f74df0262704454d03c2c4c25313bd4fa6dc7af0d254c78d025eb98a25a395d

General

Target

5f74df0262704454d03c2c4c25313bd4fa6dc7af0d254c78d025eb98a25a395d
Size

639KB
MD5

dc0ed8e25f63bf8096d14a057bc2eb9a
SHA1

e80f035f2275d5ec31e89aa605336e144728009f
SHA256

5f74df0262704454d03c2c4c25313bd4fa6dc7af0d254c78d025eb98a25a395d
SHA512

35a9b3ccab095fc043b7f12f82f0a6e0af1654d359e0bfd5cb2721c32bfd443cdc32d253074906c5b2386f5f23f5187c4ff28dad315af65d5a59037cf2b0fe81
SSDEEP

12288:uU5oLiN77m7I4jWi4tWUbOZTKKNmFv9sfQqKonZu1vA7FQuZdiU2F:uU5oLSKDjOtW6OZTKKNcvUFKOZYQFd8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f74df0262704454d03c2c4c25313bd4fa6dc7af0d254c78d025eb98a25a395d

Files

5f74df0262704454d03c2c4c25313bd4fa6dc7af0d254c78d025eb98a25a395d
.exe windows:5 windows x86 arch:x86

9455ceddfa77348df1ed07355d6c76f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualAllocEx
ExitProcess
VirtualQueryEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess

user32

MessageBoxA

vcruntime140

_CxxThrowException
__std_type_info_destroy_list
memcpy
memset
_except_handler4_common
__std_exception_copy
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_initialize_onexit_table
_cexit
_initterm_e

Sections

.code
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 569KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dpack
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9455ceddfa77348df1ed07355d6c76f7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Sections

.code Size: - Virtual size: 132KB

.data Size: - Virtual size: 569KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: - Virtual size: 14KB

.dpack Size: 637KB - Virtual size: 637KB

.code
Size: - Virtual size: 132KB

.data
Size: - Virtual size: 569KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: - Virtual size: 14KB

.dpack
Size: 637KB - Virtual size: 637KB