dc33215887f5fdd43cf1dae82e9ef10c2c78b9a1b2aeb8efc8d18f2e0e2c9128

General

Target

dc33215887f5fdd43cf1dae82e9ef10c2c78b9a1b2aeb8efc8d18f2e0e2c9128
Size

1.9MB
MD5

265c5f98f85a5e97621938b2662dfe2f
SHA1

33cc6104645a6e602e8881dcff46f06002e7598d
SHA256

dc33215887f5fdd43cf1dae82e9ef10c2c78b9a1b2aeb8efc8d18f2e0e2c9128
SHA512

f14378145707fcdf6739a98a1733321554fae407fdd679f9090567662bd6ff3c5d033cba0452d45c94e78544c0d6b86752e50807eaf46333fc1dda7dbaf5d191
SSDEEP

24576:nfvIJC5VpX/dhZ8Mtsbwa0WI4sNWd4ZUCW2fXnVIVTlPdTDeIi3VQjpT6gc7ln8S:fv6C5Pd/9tslRYW8UQQTicpTq7ln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc33215887f5fdd43cf1dae82e9ef10c2c78b9a1b2aeb8efc8d18f2e0e2c9128

Files

dc33215887f5fdd43cf1dae82e9ef10c2c78b9a1b2aeb8efc8d18f2e0e2c9128
.exe windows x86

15d3728612f2df06ac12333949c4031a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetACP
CreateFileW
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetEnvironmentVariableA
WriteConsoleW
FlushFileBuffers
SetStdHandle
SetFilePointerEx
LoadLibraryExW
GetConsoleMode
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
GetStdHandle
TerminateProcess
GetLastError
GetProcessHeap
GetOEMCP
IsValidCodePage
CloseHandle
DeleteCriticalSection
HeapSize
GetModuleHandleExW
ExitProcess
LCMapStringW
CompareStringW
GetStartupInfoW
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetTimeZoneInformation
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
RaiseException
DecodePointer
EncodePointer
GetStringTypeW

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15d3728612f2df06ac12333949c4031a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 5KB - Virtual size: 5KB