aa8c20ee55f9a621900b6b335a73004967ef7faeb3e50c39a77f3bdf35b11ff3

Sharing

Copy URL Twitter E-mail

General

Target

aa8c20ee55f9a621900b6b335a73004967ef7faeb3e50c39a77f3bdf35b11ff3
Size

5.4MB
MD5

0b44c462d489acf3373f9b25beece63c
SHA1

ce5840b8e7cb170afb0f953f693a9245c0a7a368
SHA256

aa8c20ee55f9a621900b6b335a73004967ef7faeb3e50c39a77f3bdf35b11ff3
SHA512

9a26385da3db8a8c2d346bbb7b663b40e04144b83e2c6aefad9993cbba1a82b72bde398b0357d3a1df74b22961471448a03a424b4f5d76f50c7ddfe40d8af12f
SSDEEP

49152:1rg8d1KT7xNbFDlMFEDpOmzl7FdvC0Yk/XNB5WRpva8s0B16SNUiLtbxF5W:1rJOXxxFD0EDBZFSNUst17W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8c20ee55f9a621900b6b335a73004967ef7faeb3e50c39a77f3bdf35b11ff3

Files

aa8c20ee55f9a621900b6b335a73004967ef7faeb3e50c39a77f3bdf35b11ff3
.exe windows x86

6d1830ae93d0beedb2b3d5b8c48572ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 209KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasasdd
Size: 759KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasasdd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d1830ae93d0beedb2b3d5b8c48572ad

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

iphlpapi

psapi

user32

advapi32

shell32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 209KB - Virtual size: 396KB

.idata Size: 1024B - Virtual size: 4KB

.reloc Size: - Virtual size: 96KB

.symtab Size: 512B - Virtual size: 4KB

.rsrc Size: 98KB - Virtual size: 100KB

.fasasdd Size: 759KB - Virtual size: 760KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 98KB - Virtual size: 100KB

.fasasdd Size: 4KB - Virtual size: 4KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 209KB - Virtual size: 396KB

.idata
Size: 1024B - Virtual size: 4KB

.reloc
Size: - Virtual size: 96KB

.symtab
Size: 512B - Virtual size: 4KB

.rsrc
Size: 98KB - Virtual size: 100KB

.fasasdd
Size: 759KB - Virtual size: 760KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 98KB - Virtual size: 100KB

.fasasdd
Size: 4KB - Virtual size: 4KB