33a3805c0e973d44f87d4af933e17e78ffcfa994335ed4fb95997cbc3ca0fabf

Sharing

Copy URL Twitter E-mail

General

Target

33a3805c0e973d44f87d4af933e17e78ffcfa994335ed4fb95997cbc3ca0fabf
Size

117KB
MD5

29bffe472b1fc50d40acccf833b80d4c
SHA1

ed24eab627eb3645e46c0ec7330ceeb0db950747
SHA256

33a3805c0e973d44f87d4af933e17e78ffcfa994335ed4fb95997cbc3ca0fabf
SHA512

3757ea1682f11a50b229d65ef0d829b786eaf235bd163586e594e81982eef441621a0474842df8824cb0b227d02ba7f77a3f90140e4a06265e7d2a78b1780df4
SSDEEP

3072:l9fU8F2ENgTa78XKeJoxpHue/sGFIsg4/D3:nNx/6oxxtD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33a3805c0e973d44f87d4af933e17e78ffcfa994335ed4fb95997cbc3ca0fabf

Files

33a3805c0e973d44f87d4af933e17e78ffcfa994335ed4fb95997cbc3ca0fabf
.exe windows x86

f6b777b190f11b0d2b822a0672b68293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

wnsprintfW
StrCmpNA
StrChrA
StrCmpNW
StrStrW

kernel32

WaitForSingleObjectEx
WriteConsoleW
CreateFileW
SetFilePointerEx
HeapFree
lstrlenW
ExpandEnvironmentStringsW
GetModuleFileNameW
lstrlenA
lstrcmpA
GetSystemWow64DirectoryW
Sleep
GetLastError
lstrcpyA
GlobalFree
HeapReAlloc
HeapAlloc
lstrcpynA
GetProcessHeap
lstrcpyW
GetTickCount
GetCurrentProcess
GetCurrentThreadId
CloseHandle
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
OpenProcess
GetWindowsDirectoryW
ReadProcessMemory
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
GetStringTypeW
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
DecodePointer
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
SetLastError
RtlUnwind
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetFileType

user32

wsprintfA
wsprintfW

shell32

SHGetFolderPathW

ole32

CoInitializeEx
CoGetObject
CoUninitialize

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6b777b190f11b0d2b822a0672b68293

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

shell32

ole32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 3KB - Virtual size: 8KB

.gfids Size: 512B - Virtual size: 300B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 3KB - Virtual size: 8KB

.gfids
Size: 512B - Virtual size: 300B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 5KB - Virtual size: 5KB