f1463c2752bd01d8c939d93508c6d14231fad5979f676d74e8bd65c67ef0df11

Sharing

Copy URL Twitter E-mail

General

Target

f1463c2752bd01d8c939d93508c6d14231fad5979f676d74e8bd65c67ef0df11
Size

14KB
MD5

6c38cf095a2181314a5dfc2d55ee131b
SHA1

b8b2fecc3daf39e05bb5897043275d4967a5ca44
SHA256

f1463c2752bd01d8c939d93508c6d14231fad5979f676d74e8bd65c67ef0df11
SHA512

d0edfedea216766ed5fe1eb317b80155cc1e476cfad354e437ef23f9d197c27569902167053773793ececd42c4661508f59f6308fa996f94ddfa4e0e396c295d
SSDEEP

192:Q78r7EIVVK3tynyDncAMWJ7zjOsg3PXSCbE5pz6GljXr2Q+BMDDIeTRw:Q783EIVVKtznnNJHju/X3bKrj+e02Rw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1463c2752bd01d8c939d93508c6d14231fad5979f676d74e8bd65c67ef0df11

Files

f1463c2752bd01d8c939d93508c6d14231fad5979f676d74e8bd65c67ef0df11
.exe windows x86

f712c607b76e0628febf9cf619fccd29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
WriteFile
Sleep
CreateFileA
CloseHandle
WinExec
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

vcruntime140

__current_exception
memset
_except_handler4_common
strrchr
__current_exception_context

api-ms-win-crt-stdio-l1-1-0

fclose
ftell
fwrite
__p__commode
fseek
_set_fmode
fread
fopen

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_register_thread_local_exe_atexit_callback
_cexit
__p___argv
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_seh_filter_exe
_initialize_narrow_environment
_c_exit
exit
__p___argc

api-ms-win-crt-filesystem-l1-1-0

rename
_access

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f712c607b76e0628febf9cf619fccd29

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 928B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 436B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 928B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 436B