cb3bc1b8b740f2b21baf6567c68cc9aaf7038b7e5394385a8c5d4b45cd433af4

Resubmissions

15/06/2023, 08:25

230615-kbr7lafc4v 10

12/06/2023, 03:00

230612-dhrfbaaf23 10

Sharing

Copy URL Twitter E-mail

General

Target

cb3bc1b8b740f2b21baf6567c68cc9aaf7038b7e5394385a8c5d4b45cd433af4
Size

205KB
MD5

46a85f9fb354c4a5c4ea7a321ee9c3b9
SHA1

ff3e925a9463283888189692865775205a0976a9
SHA256

cb3bc1b8b740f2b21baf6567c68cc9aaf7038b7e5394385a8c5d4b45cd433af4
SHA512

acbb500bbd9940f96c50292f4ecf8267e69730dc1db7fc33763a7f5d7afd353b572c2b687b1f63eb434501fd9c1fc315796da36a37cbb6425d42fa7d52f1fc22
SSDEEP

3072:TbX4VhWx/0KWc3T7P8bpslF2YthpQdNa2rRdLxHZX4tDaH:Ho7GfrDYOoopNglHV4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb3bc1b8b740f2b21baf6567c68cc9aaf7038b7e5394385a8c5d4b45cd433af4

Files

cb3bc1b8b740f2b21baf6567c68cc9aaf7038b7e5394385a8c5d4b45cd433af4
.exe windows x86

1b96bbe7f35030dff720bfd4a2e62f20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
WaitForSingleObject
AddConsoleAliasW
GetModuleHandleW
GetTickCount
VirtualFree
GetConsoleAliasesA
GetNumberFormatA
ReadConsoleW
GetConsoleAliasExesW
FindResourceExA
GlobalAlloc
GetCalendarInfoW
FormatMessageW
GetSystemTimeAdjustment
GetVersionExW
FindNextVolumeW
ReadFile
CreateActCtxA
GetACP
GlobalUnlock
GetLargestConsoleWindowSize
InterlockedExchange
_lwrite
GetCurrentDirectoryW
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
IsValidCodePage
LoadLibraryA
WriteConsoleA
FindFirstVolumeMountPointW
SetConsoleCtrlHandler
SetCurrentDirectoryW
FindAtomA
GetModuleFileNameA
GetCommTimeouts
CreateMutexA
VirtualProtect
GetCurrentThreadId
FileTimeToLocalFileTime
GetCurrentProcessId
OpenFileMappingA
CommConfigDialogW
WriteConsoleW
GetLocaleInfoA
CreateTimerQueue
GetLastError
LocalUnlock
GetConsoleOutputCP
GetProcessHeap
SetEndOfFile
SetStdHandle
FlushFileBuffers
HeapFree
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
WriteFile
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetOEMCP
CloseHandle
CreateFileA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

GetCaretPos
CharUpperBuffW
LoadMenuW

gdi32

GetCharacterPlacementW

advapi32

MapGenericMask
ReportEventW

ole32

ReadClassStg

winhttp

WinHttpOpen

msimg32

AlphaBlend

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

1b96bbe7f35030dff720bfd4a2e62f20

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

winhttp

msimg32

Sections

.text Size: 139KB - Virtual size: 138KB

.data Size: 6KB - Virtual size: 2.7MB

.rsrc Size: 47KB - Virtual size: 46KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 139KB - Virtual size: 138KB

.data
Size: 6KB - Virtual size: 2.7MB

.rsrc
Size: 47KB - Virtual size: 46KB

.reloc
Size: 12KB - Virtual size: 12KB