ae74f268f2fc85dff3857ea03166a9c41c708fdbde3100516416e9921fda0324

Sharing

Copy URL Twitter E-mail

General

Target

ae74f268f2fc85dff3857ea03166a9c41c708fdbde3100516416e9921fda0324
Size

725KB
MD5

49ffe4cf88f4fd4566867664a565b680
SHA1

0e1eb62f9fcb56d00ba8a23ad4472ccc0120b238
SHA256

ae74f268f2fc85dff3857ea03166a9c41c708fdbde3100516416e9921fda0324
SHA512

7e4683e72787bbd38d737af1f9c703fb465cd48dc38654dd641dafae7644e3cb60f4481f9bf6164dfe74edbb1700afdd55eb8692c87597c4b3e34c937958af9a
SSDEEP

12288:OaokbEvIj/pZghzNxGJ1HbRL49K7Fhs+QTKvdoF4m2tBYMl7RvCliVu7iBE:WM/pZcxcH+9K7FG9TKvTHRvCliVuKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae74f268f2fc85dff3857ea03166a9c41c708fdbde3100516416e9921fda0324

Files

ae74f268f2fc85dff3857ea03166a9c41c708fdbde3100516416e9921fda0324
.exe windows x86

22b7c559e8b7e3dfa2f871b3f8210e1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
SetLocaleInfoA
GetStringTypeA
GetProfileIntW
FindResourceExW
FindResourceW
EnumCalendarInfoW
GetLogicalDriveStringsW
UnlockFile
GetTickCount
GetConsoleAliasesA
GetCompressedFileSizeW
ClearCommBreak
GetDateFormatA
LoadLibraryW
CopyFileW
GetSystemWindowsDirectoryA
DeleteVolumeMountPointW
FindNextVolumeW
MulDiv
GetVolumePathNameA
GetDevicePowerState
FindFirstFileA
SetLastError
GetComputerNameA
GetProcAddress
GetLongPathNameA
BeginUpdateResourceW
EnumDateFormatsExA
IsValidCodePage
EnumSystemCodePagesW
LoadLibraryA
OpenMutexA
GetProcessWorkingSetSize
LocalAlloc
CreateHardLinkW
GetNumberFormatW
SetCurrentDirectoryW
HeapWalk
GetModuleHandleA
ReadConsoleInputW
GetWindowsDirectoryW
CreateFileA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
lstrcmpiA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle

user32

CharUpperBuffW
GetMenuBarInfo
LoadMenuA
DdeQueryStringW
GetClipboardOwner
CharToOemBuffA

gdi32

GetCharABCWidthsI

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22b7c559e8b7e3dfa2f871b3f8210e1b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 649KB - Virtual size: 648KB

.data Size: 7KB - Virtual size: 259KB

.rsrc Size: 59KB - Virtual size: 59KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 649KB - Virtual size: 648KB

.data
Size: 7KB - Virtual size: 259KB

.rsrc
Size: 59KB - Virtual size: 59KB

.reloc
Size: 8KB - Virtual size: 8KB