712916b5963bdd712c807e88ff840b35c5b6f37e79ce847b94fba04a14831495

Sharing

Copy URL Twitter E-mail

General

Target

712916b5963bdd712c807e88ff840b35c5b6f37e79ce847b94fba04a14831495
Size

342KB
MD5

8a9783e62983726a062ba29cc340c33c
SHA1

63a8e458bc6f2d272084002ef8c4325f8dbc3443
SHA256

712916b5963bdd712c807e88ff840b35c5b6f37e79ce847b94fba04a14831495
SHA512

da4b68695d1615b8fd61b78405bd11bcfface0646b4aa6b3576038a3284ce9c71df37994665742f72e08187aa2307c5f72775f346dea98a0f960c0b471c22e17
SSDEEP

6144:MrFuIp+sonu+Tl6sYLLdf1qEM4GksjDRLEAPEKQFr47jkd+2WB8mYaLdLj3St2Bq:iFbp+sonQqV9ksjDRJvkd+2WB8L92B+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
712916b5963bdd712c807e88ff840b35c5b6f37e79ce847b94fba04a14831495

Files

712916b5963bdd712c807e88ff840b35c5b6f37e79ce847b94fba04a14831495
.exe windows x86

a117dbec26380d6d65c6b21317f29e43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
FreeResource
LockResource
WriteFile
GetSystemInfo
LoadResource
FindResourceW
GetProcAddress
GetModuleHandleW
GetTempPathW
WaitForSingleObject
CreateProcessW
WriteConsoleW
GetCurrentProcess
CloseHandle
SizeofResource
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
SetFilePointerEx
GetFileType
HeapAlloc
GetConsoleMode
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetFileSizeEx
HeapSize
DecodePointer

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a117dbec26380d6d65c6b21317f29e43

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 224KB - Virtual size: 223KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 224KB - Virtual size: 223KB

.reloc
Size: 4KB - Virtual size: 4KB