3e3169459511d025a74c1801d907123096d1e9c5bfe293e13238546be25253e6

Sharing

Copy URL Twitter E-mail

General

Target

3e3169459511d025a74c1801d907123096d1e9c5bfe293e13238546be25253e6
Size

92KB
MD5

452827f8dd0166a1df689c3576e77338
SHA1

174ad70aea216ebceef0878ff585fd81271845a9
SHA256

3e3169459511d025a74c1801d907123096d1e9c5bfe293e13238546be25253e6
SHA512

b8c20ec1eb0a20e7b3eb3a7224bceb95508e82031495acc77895e07f1a26bf8c39b8b131e0d73e8586717b57696d09469ee0485cdeb802e1ffe5cab1d0e022a2
SSDEEP

768:Q7V0K6hVohkBAjkgH3EE/fugcfHPrMNGpfTcCNng0s+1BNc/wTF83DdlZuKI4/P6:CKKjTZLUm0s+1Lc/wh83DdDvO58ExJrN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e3169459511d025a74c1801d907123096d1e9c5bfe293e13238546be25253e6

Files

3e3169459511d025a74c1801d907123096d1e9c5bfe293e13238546be25253e6
.exe windows x64

809a4651dd55c8aa76acda3153cfdbbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler

msvcrt

__argv
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_onexit
_stricmp
abort
atof
atoi
calloc
exit
fprintf
fputc
free
fwrite
getenv
malloc
memcpy
printf
putchar
puts
signal
strchr
strcmp
strcpy
strlen
strncmp
vfprintf

libglib-2.0-0

g_file_test_utf8

libfluidsynth-3

delete_fluid_audio_driver
delete_fluid_cmd_handler
delete_fluid_file_renderer
delete_fluid_midi_driver
delete_fluid_midi_router
delete_fluid_player
delete_fluid_server
delete_fluid_settings
delete_fluid_synth
fluid_default_log_function
fluid_file_renderer_process_block
fluid_free
fluid_get_sysconf
fluid_get_userconf
fluid_is_midifile
fluid_is_soundfont
fluid_midi_dump_postrouter
fluid_midi_dump_prerouter
fluid_midi_router_handle_midi_event
fluid_player_add
fluid_player_get_status
fluid_player_join
fluid_player_play
fluid_player_set_playback_callback
fluid_player_stop
fluid_server_join
fluid_set_log_function
fluid_settings_dupstr
fluid_settings_foreach
fluid_settings_foreach_option
fluid_settings_get_hints
fluid_settings_get_type
fluid_settings_getint_default
fluid_settings_getint_range
fluid_settings_getnum_default
fluid_settings_getnum_range
fluid_settings_getstr_default
fluid_settings_option_concat
fluid_settings_option_count
fluid_settings_setint
fluid_settings_setnum
fluid_settings_setstr
fluid_settings_str_equal
fluid_source
fluid_synth_get_sfont
fluid_synth_handle_midi_event
fluid_synth_sfload
fluid_usershell
fluid_version_str
new_fluid_audio_driver
new_fluid_cmd_handler2
new_fluid_file_renderer
new_fluid_midi_driver
new_fluid_midi_router
new_fluid_player
new_fluid_server2
new_fluid_settings
new_fluid_synth

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 547B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

809a4651dd55c8aa76acda3153cfdbbc

Headers

File Characteristics

Imports

kernel32

msvcrt

libglib-2.0-0

libfluidsynth-3

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 8KB - Virtual size: 8KB

.pdata Size: 1024B - Virtual size: 852B

.xdata Size: 1024B - Virtual size: 740B

.bss Size: - Virtual size: 2KB

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

/4 Size: 512B - Virtual size: 80B

/19 Size: 8KB - Virtual size: 7KB

/31 Size: 512B - Virtual size: 329B

/45 Size: 1024B - Virtual size: 547B

/57 Size: 512B - Virtual size: 72B

/70 Size: 512B - Virtual size: 156B

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 8KB - Virtual size: 8KB

.pdata
Size: 1024B - Virtual size: 852B

.xdata
Size: 1024B - Virtual size: 740B

.bss
Size: - Virtual size: 2KB

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

/4
Size: 512B - Virtual size: 80B

/19
Size: 8KB - Virtual size: 7KB

/31
Size: 512B - Virtual size: 329B

/45
Size: 1024B - Virtual size: 547B

/57
Size: 512B - Virtual size: 72B

/70
Size: 512B - Virtual size: 156B