unpacked_fc4aa58229b6b2b948325f6630fe640c2527345ecb0e675592885a5fa6d26f03

Sharing

Copy URL Twitter E-mail

General

Target

unpacked_fc4aa58229b6b2b948325f6630fe640c2527345ecb0e675592885a5fa6d26f03
Size

4.6MB
MD5

3c163c437fd526b917d3483f3671b954
SHA1

3e4ece40d68f680750ddb476633ff7de88ec412d
SHA256

72e2b6e470b472da2e791cc0bdcc21241b04398e219148c36b70a607a1a537a4
SHA512

4f999587afca83e43e2aad7885016a299972fb5d7ccf42a8e94e1d4f1b4445f503e2bd7b4618384e2b348f4696a0ff7ef10a444bc3038ffc95dbf9fb1ff622dc
SSDEEP

98304:rjuerEecREQkqC8xNf1mX+CtxHIanO2471Vw/k12:xh8bOXIaO24719U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpacked_fc4aa58229b6b2b948325f6630fe640c2527345ecb0e675592885a5fa6d26f03

Files

unpacked_fc4aa58229b6b2b948325f6630fe640c2527345ecb0e675592885a5fa6d26f03
.exe windows x86

baf3c405b3a82699899c4064c22e9366

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
RaiseException
ExitProcess
HeapFree
HeapAlloc
MultiByteToWideChar
WriteConsoleW
GetStartupInfoW
GetLastError
GetModuleFileNameW
IsValidCodePage
GetProcAddress
InitializeSListHead
WaitForSingleObjectEx
ResetEvent
CloseHandle
SetStdHandle
SetUnhandledExceptionFilter
GetStringTypeW
WriteFile
IsProcessorFeaturePresent
QueryPerformanceCounter
UnhandledExceptionFilter
GetCurrentProcess
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetCPInfo
SetLastError
FreeLibrary
DecodePointer
FindClose
FreeEnvironmentStringsW
HeapReAlloc
DeleteCriticalSection
GetEnvironmentStringsW
LCMapStringW
GetConsoleOutputCP
FlushFileBuffers
GetCurrentProcessId
TerminateProcess
CreateFileW
HeapSize
LoadLibraryExW
GetFileType
IsDebuggerPresent
RtlUnwind
TlsFree
CreateEventW
GetCommandLineA
SetFilePointerEx
TlsGetValue
FindNextFileW
GetOEMCP
SetEvent
WideCharToMultiByte
GetACP
TlsAlloc
GetStdHandle
GetConsoleMode
GetSystemTimeAsFileTime
EncodePointer
FindFirstFileExW
TlsSetValue
GetModuleHandleExW
GetCommandLineW

ole32

CreateStreamOnHGlobal

Sections

Size: 182KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mrrjxxup
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xojvvmhs
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SCY
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baf3c405b3a82699899c4064c22e9366

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

Size: 182KB - Virtual size: 188KB

.rsrc Size: - Virtual size: 4KB

.idata Size: 1024B - Virtual size: 4KB

Size: 2.7MB - Virtual size: 2.7MB

mrrjxxup Size: 1.7MB - Virtual size: 1.7MB

xojvvmhs Size: 1024B - Virtual size: 4KB

.SCY Size: 2KB - Virtual size: 4KB

.rsrc
Size: - Virtual size: 4KB

.idata
Size: 1024B - Virtual size: 4KB

mrrjxxup
Size: 1.7MB - Virtual size: 1.7MB

xojvvmhs
Size: 1024B - Virtual size: 4KB

.SCY
Size: 2KB - Virtual size: 4KB