15989fa3b4c4f739baff042066620c0a

Sharing

Copy URL Twitter E-mail

General

Target

15989fa3b4c4f739baff042066620c0a
Size

566KB
MD5

15989fa3b4c4f739baff042066620c0a
SHA1

77b996dffac201a114fe5581f5bcf8efe74d891a
SHA256

560c68027d3e4c19966c262b9d01a9bc02ffb1b93625f7bcd9444ad0162dbf35
SHA512

19b50246cf477cb1756c04641a9d478dba8869f2bad51248cfcd1a6d132358fa4860eaa0e0fce2bfbffa99adeb53717200972e7eb0b1418715980cd0a74b175c
SSDEEP

12288:1Kt1Ak1Df3X93muy6h1RHZdrgIainCL+Sq7gaSmaVq:AHBP9z37OiC+SrG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15989fa3b4c4f739baff042066620c0a

Files

15989fa3b4c4f739baff042066620c0a
.exe windows x86

b90e72ad14657e39aa7c184e629eebe7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

CommandLineToArgvW

kernel32

CloseHandle
CreateDirectoryW
CreateFileW
CreateProcessW
DosDateTimeToFileTime
DuplicateHandle
EnumResourceNamesW
ExitProcess
ExpandEnvironmentStringsW
FindResourceW
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandleEx
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetVolumeInformationW
GetVolumePathNameW
HeapAlloc
HeapFree
IsProcessorFeaturePresent
LoadLibraryExA
LoadLibraryExW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
SetFileInformationByHandle
SetFilePointer
SetLastError
SetProcessWorkingSetSize
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrlenW

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 122.4MB - Virtual size: 122.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b90e72ad14657e39aa7c184e629eebe7

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 948B

.00cfg Size: 512B - Virtual size: 4B

.rsrc Size: 122.4MB - Virtual size: 122.4MB

.reloc Size: 1024B - Virtual size: 912B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 948B

.00cfg
Size: 512B - Virtual size: 4B

.rsrc
Size: 122.4MB - Virtual size: 122.4MB

.reloc
Size: 1024B - Virtual size: 912B