36704924c6fdbb6b68b05a99e4ec97031535f2524941e04d64df43fd3a3bbb4f

Sharing

Copy URL Twitter E-mail

General

Target

36704924c6fdbb6b68b05a99e4ec97031535f2524941e04d64df43fd3a3bbb4f
Size

266KB
MD5

d6a53f48ec4e99638bc0db8cdb2f4081
SHA1

879402a07d849a471a729790e7c3769e9fc1e428
SHA256

36704924c6fdbb6b68b05a99e4ec97031535f2524941e04d64df43fd3a3bbb4f
SHA512

13f57543115e0707c280def2754cbc416767c984e57b64540daf117474f4a90905e7a0214707b4dd8b3a90c2b7146cdb3f044d3381dc530d082167722c928277
SSDEEP

6144:i4Ulo1tlvP7TBmQbTJuapn73sq7BmUpuD9dlE1YN9qs:D1tlvP7TfbA2TLVmAalh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36704924c6fdbb6b68b05a99e4ec97031535f2524941e04d64df43fd3a3bbb4f

Files

36704924c6fdbb6b68b05a99e4ec97031535f2524941e04d64df43fd3a3bbb4f
.exe windows x86

a6a1f5fa7d98bd813181840d8ec7a33b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
VirtualFree
VirtualAlloc
VirtualProtect
GetModuleHandleA
LoadLibraryA
GetProcAddress
FlushFileBuffers
CreateFileW
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapReAlloc
RtlUnwind
LoadLibraryW
HeapSize
MultiByteToWideChar
IsValidCodePage
GetOEMCP
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
Sleep
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP

user32

DispatchMessageW
TranslateMessage
GetMessageW
DefWindowProcW
PostQuitMessage
EndPaint
BeginPaint
SetTimer
KillTimer
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW

shell32

SHGetSpecialFolderPathW

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6a1f5fa7d98bd813181840d8ec7a33b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 164KB - Virtual size: 171KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 164KB - Virtual size: 171KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 6KB - Virtual size: 5KB