f7d844616a104b1fa389c77ff2ec7faae4f07f54164d3c1245b885db934cec2f

Sharing

Copy URL Twitter E-mail

General

Target

f7d844616a104b1fa389c77ff2ec7faae4f07f54164d3c1245b885db934cec2f
Size

13.1MB
MD5

c8d45abc7158c4d1a06c0959c2c3a10d
SHA1

03dd679baa79651c1ba6190263255f4007c0d993
SHA256

f7d844616a104b1fa389c77ff2ec7faae4f07f54164d3c1245b885db934cec2f
SHA512

fe03c5f1bc847da7b9d71ed730a35e83125b299ca32c69213928a51cc94b1a13f91cf92030963f0499fa82ae8f80969d31ceec873a2595944f683c3df3e2809a
SSDEEP

393216:yFVQkdBHRnM82fHgTFQM/XhWLKee39LyqKBRbvwP7L8aDgSY3GBtkNdPmCVZZl:wQc9OqKYfyWBtIdBZH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7d844616a104b1fa389c77ff2ec7faae4f07f54164d3c1245b885db934cec2f

Files

f7d844616a104b1fa389c77ff2ec7faae4f07f54164d3c1245b885db934cec2f
.exe windows x86

c08d91c2e7a9c6f292ef4cd2c4010337

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetUserNameA

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WriteConsoleA
WriteConsoleW

msvcrt

__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
signal
strcmp
strncmp
vfprintf

user32

EnumDisplayDevicesA

Sections

.text
Size: 12.6MB - Virtual size: 12.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 204B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c08d91c2e7a9c6f292ef4cd2c4010337

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 12.6MB - Virtual size: 12.6MB

.data Size: 505KB - Virtual size: 505KB

.rdata Size: 2KB - Virtual size: 2KB

.eh_fram Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 204B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 1024B - Virtual size: 668B

.text
Size: 12.6MB - Virtual size: 12.6MB

.data
Size: 505KB - Virtual size: 505KB

.rdata
Size: 2KB - Virtual size: 2KB

.eh_fram
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 204B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 1024B - Virtual size: 668B