90700728fd8d3cbf90fcf382f2036470ee38f1a5a8535a34f7d7009c34886a21

Sharing

Copy URL Twitter E-mail

General

Target

90700728fd8d3cbf90fcf382f2036470ee38f1a5a8535a34f7d7009c34886a21
Size

476KB
MD5

8d9afaa97645551ac2031545df97b2d0
SHA1

c2ba8c0b32abf868b2a7d44d1b17833f6d225812
SHA256

90700728fd8d3cbf90fcf382f2036470ee38f1a5a8535a34f7d7009c34886a21
SHA512

8b9279d9989a284ce80cf093e5cea09a95494ad0f0679056f36784d6733d4fdfa905e4c9dc11a1c339df31cb425f3b366e5ca79443ab2f49177de6282a804e1c
SSDEEP

3072:uHP1LpkMME1Z5yFp45qr6UmnHY4QKe8FfU77W+:0PXkM5yc4rtmDFfUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90700728fd8d3cbf90fcf382f2036470ee38f1a5a8535a34f7d7009c34886a21

Files

90700728fd8d3cbf90fcf382f2036470ee38f1a5a8535a34f7d7009c34886a21
.exe windows x86

a5a4119fdff7f237f6743fc7730080f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
LoadResource
GetModuleHandleW
SizeofResource
GetProcAddress
VirtualAlloc
LoadLibraryA
LockResource
GetModuleHandleA
IsDebuggerPresent
VirtualProtect
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
GetLastError
HeapFree
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
HeapAlloc
RaiseException
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
IsProcessorFeaturePresent
HeapReAlloc
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetFilePointer
WriteConsoleW
SetStdHandle
CreateFileW

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5a4119fdff7f237f6743fc7730080f9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 416KB - Virtual size: 416KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 416KB - Virtual size: 416KB

.reloc
Size: 6KB - Virtual size: 5KB