35851246e706e1288a754131031c7546422d2200c85da831301d29007d585b92

Sharing

Copy URL

Twitter E-mail

General

Target

35851246e706e1288a754131031c7546422d2200c85da831301d29007d585b92
Size

393KB
MD5

7ee186d9f97e87207a6d7b0f22c6017a
SHA1

520a11c70423b29314f3d0f9cbef4768fa950aac
SHA256

35851246e706e1288a754131031c7546422d2200c85da831301d29007d585b92
SHA512

5602f3dbdb7e05cb47cf2ca58f24d0756b201a0265f5fbb25b57d5a096f3688dd5c2cc178f2c8e4e284fefce4a1a76b34488e616c6f9681168a14ae9cf897e0b
SSDEEP

6144:T7p3AxFLYLFs0eBd+JkLFN7vDstKxSNdT3cbwN:TlOF8HeBBLF1rstCSNd4bwN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35851246e706e1288a754131031c7546422d2200c85da831301d29007d585b92

Files

35851246e706e1288a754131031c7546422d2200c85da831301d29007d585b92
.exe windows x86

fa15bd4f5a5e96cb5fbd439b6b64330b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
GetModuleHandleW
EnumSystemFirmwareTables
FreeConsole
GetLastError
CreateFileW
ReadConsoleW
SetStdHandle
FindNextFileA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
HeapAlloc
HeapValidate
GetSystemInfo
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetProcessHeap
GetFileType
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
CreateThread
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
FindClose
FindFirstFileExA
GetCurrentProcess

wininet

InternetCloseHandle
HttpQueryInfoW
InternetOpenW
InternetOpenUrlA
InternetReadFile

advapi32

SystemFunction036

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa15bd4f5a5e96cb5fbd439b6b64330b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wininet

advapi32

Sections

.text Size: 269KB - Virtual size: 269KB

.rdata Size: 93KB - Virtual size: 92KB

.data Size: 4KB - Virtual size: 9KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 269KB - Virtual size: 269KB

.rdata
Size: 93KB - Virtual size: 92KB

.data
Size: 4KB - Virtual size: 9KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 14KB - Virtual size: 14KB