e77ed2ef75e8208468b772299f382a532c8ffb0894344ab80e5db06a7b2011c2

Sharing

Copy URL Twitter E-mail

General

Target

e77ed2ef75e8208468b772299f382a532c8ffb0894344ab80e5db06a7b2011c2
Size

219KB
MD5

232eb29fb13a6d159dcea45a5d94310c
SHA1

4aaa800dc6786f9f946bbf42f2640a34d4557d47
SHA256

e77ed2ef75e8208468b772299f382a532c8ffb0894344ab80e5db06a7b2011c2
SHA512

b28ae61535f4cb3afea32181f110d45f75e735d896d89bf65a4140e3ce377b2118805ae9b81591b04988c884c98e6112000b1a5906fe6450743599a6e4fb29c1
SSDEEP

3072:8SB3p7rIN9o5UNpNNq3zI79zh+VBCIr5PYC3NLr:FB+YUNqjIpzh+HYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e77ed2ef75e8208468b772299f382a532c8ffb0894344ab80e5db06a7b2011c2

Files

e77ed2ef75e8208468b772299f382a532c8ffb0894344ab80e5db06a7b2011c2
.exe windows x86

40b1ab4a745fe1ee8bbb56d3d5c8553b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddConsoleAliasW
FindCloseChangeNotification
UnlockFile
GetModuleHandleW
GetConsoleAliasesLengthA
GetWindowsDirectoryA
EnumTimeFormatsA
GetDateFormatA
EnumResourceTypesA
SetHandleCount
TlsSetValue
FindResourceExA
GlobalAlloc
LoadLibraryW
SetCommConfig
GetCalendarInfoW
GetStringTypeExW
FindNextVolumeW
GetConsoleAliasW
GetFileAttributesW
GlobalUnfix
GetProfileIntA
SetThreadLocale
GetCPInfoExW
ScrollConsoleScreenBufferW
GetProcAddress
VirtualAlloc
HeapSize
BeginUpdateResourceW
WriteProfileSectionA
CreateMemoryResourceNotification
SetThreadPriorityBoost
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
WaitForMultipleObjects
GetDefaultCommConfigA
GetConsoleTitleW
VirtualProtect
OpenEventW
GetWindowsDirectoryW
AddConsoleAliasA
DebugBreak
EnumCalendarInfoExA
GetModuleHandleA
VerSetConditionMask
SetLastError
CreateFileA
MultiByteToWideChar
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetLastError
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsFree
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
RaiseException
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind

user32

GetWindowLongW
RegisterClassW
SetCaretPos
CharLowerBuffW

gdi32

GetCharWidthW
SetColorAdjustment
GetCharABCWidthsI

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40b1ab4a745fe1ee8bbb56d3d5c8553b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 140KB - Virtual size: 140KB

.data Size: 14KB - Virtual size: 501KB

.rsrc Size: 56KB - Virtual size: 56KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 140KB - Virtual size: 140KB

.data
Size: 14KB - Virtual size: 501KB

.rsrc
Size: 56KB - Virtual size: 56KB

.reloc
Size: 7KB - Virtual size: 6KB