e9749deaf0f03e1c575e7d902449a39786faf3fcf75c504f62ad37a707d0a996

Sharing

Copy URL Twitter E-mail

General

Target

e9749deaf0f03e1c575e7d902449a39786faf3fcf75c504f62ad37a707d0a996
Size

37KB
MD5

cfea664bc62141f8bfe8d57dc350da6e
SHA1

af372add0aacadc63a1e6887987bc5f32a567610
SHA256

e9749deaf0f03e1c575e7d902449a39786faf3fcf75c504f62ad37a707d0a996
SHA512

a7428dd69a8f3eeafd04791f3d8776b48492cd62f9ea0f833641deb19472fdc0225ee9fc3b69c3059ac20395ab32b9394613e1b1b494eef7066a9ba4f600b9f7
SSDEEP

768:gGePctCv1hn8soRVROLWZESncb3Q4nVUGP1SZQE/Mq3eTBl1t58XK:gGehYv/ROSZVMnnVt1SZQ2MHTBl1t586

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9749deaf0f03e1c575e7d902449a39786faf3fcf75c504f62ad37a707d0a996

Files

e9749deaf0f03e1c575e7d902449a39786faf3fcf75c504f62ad37a707d0a996
.exe windows x64

50131f820656a6d9610e1b0e19c08b54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libcrypto-3-x64

BIO_free_all
BIO_f_prefix
BIO_vprintf
ERR_print_errors_cb
ERR_clear_error
BIO_push
BIO_ctrl
BIO_free
BIO_new
BIO_new_fp
OPENSSL_die
X509_ALGOR_free
X509_ALGOR_new
X509_ALGOR_get0
X509_ALGOR_set0
OSSL_PROVIDER_unload
OSSL_PROVIDER_load
EVP_aes_128_cbc
EVP_sha256
EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_new
EVP_CipherFinal_ex
EVP_CipherUpdate
EVP_CipherInit_ex
EVP_MD_free
EVP_MD_up_ref
EVP_MD_fetch
EVP_DigestFinal_ex
EVP_DigestUpdate
EVP_DigestInit_ex
EVP_MD_CTX_free
EVP_MD_CTX_new
EVP_CIPHER_free
EVP_CIPHER_up_ref
EVP_CIPHER_fetch
EVP_MD_CTX_get0_md
EVP_MD_get_block_size
EVP_MD_get_size
EVP_MD_is_a
OBJ_obj2txt
OBJ_nid2obj
OSSL_LIB_CTX_free
OSSL_LIB_CTX_load_config
OSSL_LIB_CTX_new
OPENSSL_thread_stop_ex

kernel32

QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
GetFileAttributesW
MultiByteToWideChar
GetCommandLineW
GetEnvironmentVariableW
FindFirstFileW
FindNextFileW
CloseHandle
WideCharToMultiByte
GetConsoleOutputCP
GetSystemTimeAsFileTime
GetCurrentThreadId
SetConsoleOutputCP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetModuleHandleW

vcruntime140

__current_exception_context
__current_exception
strchr
memset
memcmp
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

terminate
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
_initialize_onexit_table
_register_onexit_function
_errno

api-ms-win-crt-string-l1-1-0

_strdup
strncmp
tolower

api-ms-win-crt-convert-l1-1-0

atoi
strtoul
strtol

api-ms-win-crt-heap-l1-1-0

realloc
_set_new_mode
malloc
free

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
_set_fmode
__p__commode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50131f820656a6d9610e1b0e19c08b54

Headers

DLL Characteristics

File Characteristics

Imports

libcrypto-3-x64

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 34KB

.pdata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 136B

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 34KB

.pdata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 136B