e0de5010275f1166babaf89710f12b5b12c69fdce480a16c7b0d1c0984a90ec9

Sharing

Copy URL Twitter E-mail

General

Target

e0de5010275f1166babaf89710f12b5b12c69fdce480a16c7b0d1c0984a90ec9
Size

159KB
MD5

512d02bf40fd6fe26f2b1d7fb11d2fc7
SHA1

6c13474772cc66e5c319d8508d5b30460407b65e
SHA256

e0de5010275f1166babaf89710f12b5b12c69fdce480a16c7b0d1c0984a90ec9
SHA512

eb4cb0413761f44b16300f6a02938c100a1ea3e81b725d7ce5acb7b97d57141688d2c1a581b60480980362ccfd38b69884ef9375bfb55ef3b685a7b200b6f517
SSDEEP

3072:GExdKc1Np4z5TM4tKJw6zohLC1NIDjcGC5EF/IJnsi49R6dnbeF4Bi++Fv6q:jzl1N2qE1C1N+cxCFMneadbeiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0de5010275f1166babaf89710f12b5b12c69fdce480a16c7b0d1c0984a90ec9

Files

e0de5010275f1166babaf89710f12b5b12c69fdce480a16c7b0d1c0984a90ec9
.exe windows x86

fee7c2a38e36167a47014ef25d79b97b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
FindExecutableW

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA

kernel32

SetEndOfFile
DecodePointer
SystemTimeToTzSpecificLocalTime
WriteConsoleW
GetProcAddress
GetCurrentProcess
Sleep
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
SetCurrentDirectoryA
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
RaiseException
FileTimeToSystemTime
GetStdHandle
WriteFile
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DeleteFileW
SetFilePointerEx
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
GetFullPathNameW
SetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetProcessHeap
RemoveDirectoryW
ReadFile
ReadConsoleW
GetFileSizeEx
GetTimeZoneInformation
HeapSize
HeapReAlloc

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fee7c2a38e36167a47014ef25d79b97b

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

kernel32

Sections

.text Size: 114KB - Virtual size: 113KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 7KB - Virtual size: 12KB

.gfids Size: 512B - Virtual size: 180B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 7KB - Virtual size: 12KB

.gfids
Size: 512B - Virtual size: 180B

.reloc
Size: 5KB - Virtual size: 5KB