fe82c033128fd57013a32cb5b688696e4aa4ff22f83c5ddc03eee157018c1f58

Resubmissions

24/07/2023, 10:33

230724-mljdjsce86 3

Sharing

Copy URL Twitter E-mail

General

Target

fe82c033128fd57013a32cb5b688696e4aa4ff22f83c5ddc03eee157018c1f58
Size

2.2MB
MD5

f674b6e4646e84a309c2cc3ec005b861
SHA1

c3d778046c967decb836f6c3fc4abf53bc129f38
SHA256

fe82c033128fd57013a32cb5b688696e4aa4ff22f83c5ddc03eee157018c1f58
SHA512

a3633e1c0d751b80bec4fc2184602b7f62796d831c86946d75a14cd13fde7901e5f276525952e53bef8ab09205d7fb84b3bb5db8a18a3f4914c19a9ba7e68ed9
SSDEEP

12288:PNUDbEANPqrEdrER3wMnqfxDvTHY7jEe7l8gFb8:PNUDYANCodoViDvT4PEeJ8gJ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe82c033128fd57013a32cb5b688696e4aa4ff22f83c5ddc03eee157018c1f58

Files

fe82c033128fd57013a32cb5b688696e4aa4ff22f83c5ddc03eee157018c1f58
.exe windows x64

a431d26f718c0c144c3a6a9cdbb19216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ReadFile
GetModuleFileNameA
SizeofResource
GetFileSizeEx
GetCurrentProcess
WriteFile
DeviceIoControl
GetModuleFileNameW
GetTempPathW
CreateMutexA
WaitForSingleObject
CreateFileW
GetFileAttributesW
CreateToolhelp32Snapshot
GetLastError
GetFileAttributesA
Process32NextW
SetFileInformationByHandle
QueryFullProcessImageNameA
CreateFileA
LockResource
DeleteFileA
DeleteFileW
Process32FirstW
CloseHandle
RaiseException
GetSystemInfo
CreateThread
LoadResource
FindResourceW
MoveFileExW
GetFileSize
ExitProcess
GlobalMemoryStatusEx
QueryFullProcessImageNameW
GetTempFileNameW
lstrcmpiW
GetComputerNameA
SetUnhandledExceptionFilter
MultiByteToWideChar
GetModuleHandleExW
FreeLibrary
TerminateProcess
Sleep
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection

shell32

ShellExecuteW

shlwapi

PathRemoveFileSpecW
PathIsPrefixW
PathFileExistsW
AssocQueryStringW
PathFindExtensionW
PathRemoveBackslashW
PathRemoveFileSpecA
PathFindFileNameW

wininet

InternetOpenW
InternetCloseHandle
InternetSetOptionW
InternetReadFile
InternetOpenUrlW

msvcrt

__wgetmainargs
_msize
_XcptFilter
__set_app_type
_wcmdln
?_set_new_mode@@YAHH@Z
_commode
?terminate@@YAXXZ
___lc_codepage_func
wctomb_s
ceil
log10
realloc
_clearfp
_time64
rand
srand
clock
calloc
memcpy
memmove
_amsg_exit
_CxxThrowException
memset
__C_specific_handler
strrchr
wcsrchr
_mbtowc_l
strtol
wcstol
strnlen
___mb_cur_max_func
wcsnlen
tolower
__pctype_func
strcpy_s
_errno
malloc
free
_initterm_e
_set_fmode
_initterm
_callnewh
__CxxFrameHandler3

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

a431d26f718c0c144c3a6a9cdbb19216

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

shlwapi

wininet

msvcrt

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.reloc Size: 512B - Virtual size: 192B

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 512B - Virtual size: 192B