d2dc71ae60dc5b0594247df11d7a6b861c36528f8951f905ae8246bcf6f6130e

Sharing

Copy URL Twitter E-mail

General

Target

d2dc71ae60dc5b0594247df11d7a6b861c36528f8951f905ae8246bcf6f6130e
Size

44KB
MD5

167ed4c8311bd19c8aae2df529f55549
SHA1

a03a57c609d066971af517802f6009203c0b2533
SHA256

d2dc71ae60dc5b0594247df11d7a6b861c36528f8951f905ae8246bcf6f6130e
SHA512

bea4bb9fef8e9fa19d9113e622a9d7a416f12a5b0b8dda081ac0122a4d16451e168d8223562c5e4a5ed4ae455eee0280dfb09e786bcf3275392d5fab1f322b8c
SSDEEP

384:YA1w9FBZqS3zLkxxa7D8P0NuDPPyovDtSJJb8wPhRUjS/1AD23YZrDQ:91w3B2x+D8P0oDCk5SJBFhuS/qDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2dc71ae60dc5b0594247df11d7a6b861c36528f8951f905ae8246bcf6f6130e

Files

d2dc71ae60dc5b0594247df11d7a6b861c36528f8951f905ae8246bcf6f6130e
.exe windows x86

ef745af2b195b29c3cbb1fa1968231c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryW
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
GetModuleHandleW
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
RaiseException
IsDebuggerPresent
GetCurrentThreadId
FreeLibrary
LoadLibraryA

vcruntime140d

__current_exception_context
_except_handler4_common
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
__current_exception
memset
__std_type_info_destroy_list

ucrtbased

_initterm_e
exit
_exit
_set_fmode
__p___argc
__p___argv
_cexit
system
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
strcpy_s
strcat_s
__stdio_common_vsprintf_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_get_initial_narrow_environment
_crt_atexit
_crt_at_quick_exit
_controlfp_s
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
_initialize_narrow_environment
rand
srand
malloc
free
__stdio_common_vfprintf
ftell
fseek
fread
fopen
fclose
__acrt_iob_func
_initterm
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
_CrtDbgReportW
_CrtDbgReport
_execute_onexit_table
_time64
_c_exit

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 512B - Virtual size: 287B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef745af2b195b29c3cbb1fa1968231c2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140d

ucrtbased

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 2KB

.msvcjmc Size: 512B - Virtual size: 287B

.00cfg Size: 512B - Virtual size: 265B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 2KB

.msvcjmc
Size: 512B - Virtual size: 287B

.00cfg
Size: 512B - Virtual size: 265B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB