dbc32108bea0104bde4c6af700c6f13644851d9a56727e6c1d688545c870e0ab

Sharing

Copy URL Twitter E-mail

General

Target

dbc32108bea0104bde4c6af700c6f13644851d9a56727e6c1d688545c870e0ab
Size

2.9MB
MD5

bfffbec5bc15c253c58dd79e5f7ee632
SHA1

81290a00db1fa7a37c59b1365dc11597fbbc4a5b
SHA256

dbc32108bea0104bde4c6af700c6f13644851d9a56727e6c1d688545c870e0ab
SHA512

4550f6109ec3c1f74369617d75005d61d233f1d99487f24332250ac88a59934c3a515cdb012937a9062c0ffed89e471391a41dacc18a0cf06c5e9ecebca7e908
SSDEEP

49152:O4/3fTjVNLjC1KXxYty/ZWQ9r6W7ZQyEFIoOwFPEcF+kqTcdGlaQKX/anl+aoW:DrG1KhYt8ZCW7ZbwNEk+kj+a4nEaoW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbc32108bea0104bde4c6af700c6f13644851d9a56727e6c1d688545c870e0ab

Files

dbc32108bea0104bde4c6af700c6f13644851d9a56727e6c1d688545c870e0ab
.exe windows x86

d1c7f8bad969643c80b9f25cc29b5922

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect

msvcp140

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

vcruntime140

memset

api-ms-win-crt-stdio-l1-1-0

fgetpos

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 1.7MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 818KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1c7f8bad969643c80b9f25cc29b5922

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

msvcrt

iphlpapi

psapi

user32

advapi32

shell32

Sections

.text Size: 1.7MB - Virtual size: 6.1MB

.sedata Size: 818KB - Virtual size: 820KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 363KB - Virtual size: 364KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.7MB - Virtual size: 6.1MB

.sedata
Size: 818KB - Virtual size: 820KB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 363KB - Virtual size: 364KB

.sedata
Size: 4KB - Virtual size: 4KB