2a09341e0f0333048643366ceebf8e7e429de62c424ca84d7bc1eb0803904f5d

Sharing

Copy URL Twitter E-mail

General

Target

2a09341e0f0333048643366ceebf8e7e429de62c424ca84d7bc1eb0803904f5d
Size

120KB
MD5

722305eeeaaffb8db8b7b71f81a07a4b
SHA1

2f247df6826f20e59e8055691df798becba4b8b7
SHA256

2a09341e0f0333048643366ceebf8e7e429de62c424ca84d7bc1eb0803904f5d
SHA512

0729e7e07aa4cb8ff54accfc8a5270ec6cecb3464f7c7ef25f069ce231d4204e5e6a14d5b4c69920b8f2c7c160984b3082609c05b4c524ca37e74363d7d9ad06
SSDEEP

768:PC5lWxF+GMiU4olFuD+Edko5D6wsSu2869Sbh9Sbjy:PGa+4olZEdkQ6wsSw6CR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a09341e0f0333048643366ceebf8e7e429de62c424ca84d7bc1eb0803904f5d

Files

2a09341e0f0333048643366ceebf8e7e429de62c424ca84d7bc1eb0803904f5d
.exe windows x86

d9cbf733e8cf3a7ef5afeef73948dce8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
QueryPerformanceCounter
InitializeSListHead
GetSystemTimeAsFileTime
OutputDebugStringW
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
TerminateThread
WaitForMultipleObjects
SetEvent
CreateEventW
WaitForSingleObject
ResetEvent
GetLastError
CreateMutexW
GetCurrentThreadId

user32

UnregisterClassW
GetWindowLongW
SetWindowLongW
IsWindow
DestroyWindow
DialogBoxParamW
KillTimer
SetTimer
EndDialog
ReleaseDC
MonitorFromWindow
GetMonitorInfoW
UpdateWindow
CreateWindowExW
RegisterClassExW
SendMessageW
RegisterWindowMessageW
LoadAcceleratorsW
EndPaint
BeginPaint
PostQuitMessage
DefWindowProcW
GetDC
EnableWindow
GetDlgItem
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW

gdi32

BitBlt
SelectObject
DeleteDC
CreateCompatibleBitmap
DeleteObject
CreateDIBSection
CreateCompatibleDC

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
PropVariantClear

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW

vcruntime140

memset
_except_handler4_common
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
_purecall
__std_terminate
__CxxFrameHandler3
memcpy

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_seh_filter_exe
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_invalid_parameter_noinfo
_c_exit
_register_thread_local_exe_atexit_callback
_cexit
_errno
terminate
_controlfp_s
_invalid_parameter_noinfo_noreturn
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_beginthreadex

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
free
malloc

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9cbf733e8cf3a7ef5afeef73948dce8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

msvcp140

avrt

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 293KB

.gfids Size: 512B - Virtual size: 80B

.rsrc Size: 93KB - Virtual size: 92KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 293KB

.gfids
Size: 512B - Virtual size: 80B

.rsrc
Size: 93KB - Virtual size: 92KB

.reloc
Size: 2KB - Virtual size: 1KB