f15e1b64d1b594b5ca3db1dc9034ced1caedb0b2b1d658725240998bd27ffcd3

Sharing

Copy URL Twitter E-mail

General

Target

f15e1b64d1b594b5ca3db1dc9034ced1caedb0b2b1d658725240998bd27ffcd3
Size

116KB
MD5

b7e45f4a54b39ca0ebc42bfdda8939e9
SHA1

6dd9699e88e7ad9a2f3aafea7eb8ef58a165243e
SHA256

f15e1b64d1b594b5ca3db1dc9034ced1caedb0b2b1d658725240998bd27ffcd3
SHA512

163b5a2cfd5cd41aea453ae4ed74ef2dfe587aa6e3bfcd43db1d18c33bfe85b35d6cd3d32aaed8f38c30f9dff6c54e1e3c17a7e524d39fb06f637fb75929a24a
SSDEEP

1536:b/jpckbWt3NIbzgI7ZbwZ+TA8tcB3sch+JWHIOf3nguLNNkdM6pwdddu:b/lZSFNIf7AMpxuKWdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f15e1b64d1b594b5ca3db1dc9034ced1caedb0b2b1d658725240998bd27ffcd3

Files

f15e1b64d1b594b5ca3db1dc9034ced1caedb0b2b1d658725240998bd27ffcd3
.exe windows x64

74b4013244233585d46213825b135003

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDeriveKey
CryptDestroyHash
CryptDestroyKey
CryptHashData
CryptReleaseContext

kernel32

CreateThread
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 384B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 707B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 512B - Virtual size: 405B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74b4013244233585d46213825b135003

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 128B

.rdata Size: 3KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 540B

.xdata Size: 512B - Virtual size: 412B

.bss Size: - Virtual size: 384B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 120B

/4 Size: 1KB - Virtual size: 1KB

/19 Size: 39KB - Virtual size: 38KB

/31 Size: 7KB - Virtual size: 7KB

/45 Size: 7KB - Virtual size: 6KB

/57 Size: 3KB - Virtual size: 2KB

/70 Size: 1024B - Virtual size: 707B

/81 Size: 4KB - Virtual size: 3KB

/97 Size: 5KB - Virtual size: 4KB

/113 Size: 512B - Virtual size: 405B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 128B

.rdata
Size: 3KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 540B

.xdata
Size: 512B - Virtual size: 412B

.bss
Size: - Virtual size: 384B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 120B

/4
Size: 1KB - Virtual size: 1KB

/19
Size: 39KB - Virtual size: 38KB

/31
Size: 7KB - Virtual size: 7KB

/45
Size: 7KB - Virtual size: 6KB

/57
Size: 3KB - Virtual size: 2KB

/70
Size: 1024B - Virtual size: 707B

/81
Size: 4KB - Virtual size: 3KB

/97
Size: 5KB - Virtual size: 4KB

/113
Size: 512B - Virtual size: 405B