3430363bf5af998eeefd4ce9fc88ee8bda237ea32b0af2285348f0c8b8669dba

Sharing

Copy URL Twitter E-mail

General

Target

3430363bf5af998eeefd4ce9fc88ee8bda237ea32b0af2285348f0c8b8669dba
Size

150KB
MD5

56dd3ce6e2610c8e602fc612986f01e8
SHA1

7845414f5dc77e5b2eb6c466308ec45300e7d628
SHA256

3430363bf5af998eeefd4ce9fc88ee8bda237ea32b0af2285348f0c8b8669dba
SHA512

fb072a1ddd71b9fb3f8941b70fdf9deb089834038d282b4826aa7f36a8c7a0511a77f429ecdb3a43a99e3439bc9ffb5963b19ea8a91d2b122b73a6fdc2849d28
SSDEEP

3072:J8+ajsGayvvf7wPKgvyCSHzztIe0+/gx:J8rjfbf0KMegBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3430363bf5af998eeefd4ce9fc88ee8bda237ea32b0af2285348f0c8b8669dba

Files

3430363bf5af998eeefd4ce9fc88ee8bda237ea32b0af2285348f0c8b8669dba
.exe windows x86

5d8ab976f9aa5eec41e29a881b2ab460

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
GetConsoleCP
GetTimeZoneInformation
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
RtlUnwind
HeapSize
SetFilePointer
HeapCreate
GetStringTypeW
LCMapStringW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetLocaleInfoW
GetModuleFileNameW
WriteFile
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
SetStdHandle
CreateFileA
SetEndOfFile
CompareStringW
SetEnvironmentVariableA
CreateFileW
LoadLibraryW
SetConsoleTitleW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
ExitProcess
GetModuleHandleW
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
HeapFree
HeapAlloc
LoadLibraryA
GetProcAddress
GetLastError
FreeLibrary
CloseHandle
GetConsoleScreenBufferInfo
GetStdHandle
Sleep
SetConsoleTextAttribute
GetCurrentThreadId
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
InterlockedDecrement
InterlockedIncrement
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ReadFile
GetCommandLineW
HeapSetInformation
InitializeCriticalSection

lastdevtype

gde_get_last_device_info

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d8ab976f9aa5eec41e29a881b2ab460

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

lastdevtype

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 10KB - Virtual size: 255KB

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 10KB - Virtual size: 255KB

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 10KB - Virtual size: 10KB