9fa5d027edbff9e216d88194d724bf0b892baf3a6ff6a5393d4d39b40c30b18a

Sharing

Copy URL

Twitter E-mail

General

Target

9fa5d027edbff9e216d88194d724bf0b892baf3a6ff6a5393d4d39b40c30b18a
Size

112KB
MD5

9cd8b3c20045cedf3149f21809dbfa56
SHA1

fb915f31a77f84d1a282d31aa89ec62ffbdf8486
SHA256

9fa5d027edbff9e216d88194d724bf0b892baf3a6ff6a5393d4d39b40c30b18a
SHA512

62ed48c964e83b20e27e030edc10fb199f3604e7da44108c060555fd37de0d88055ea4686ac57db8d0b23bc36e95202721259a06ec878a8d64aa4efbe84cc6dd
SSDEEP

3072:poEzRKEY7LfrH/n7bHbbfnf7l33Nb73fN3zT57bhlMm4bNW5mstFhcIsbjA6ba8t:7zQ57LfrH/n7bHbbfnf7l33Nb73fN3z2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fa5d027edbff9e216d88194d724bf0b892baf3a6ff6a5393d4d39b40c30b18a

Files

9fa5d027edbff9e216d88194d724bf0b892baf3a6ff6a5393d4d39b40c30b18a
.exe windows x86

fd88312b9b34a1e9d56e1b48316e199f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc100

ord3395
ord11025
ord8222
ord13973
ord13972
ord14045
ord14062
ord14058
ord14060
ord14061
ord14059
ord2417
ord7349
ord2878
ord2881
ord12535
ord5534
ord2742
ord3738
ord5784
ord8224
ord2744
ord3741
ord7861
ord2613
ord3429
ord5805
ord8305
ord8330
ord11108
ord8235
ord2416
ord12531
ord5532
ord2752
ord2973
ord2974
ord3620
ord10360
ord10007
ord8137
ord11067
ord9475
ord4398
ord4364
ord4368
ord4401
ord9399
ord3991
ord13980
ord3984
ord2661
ord13302
ord7074
ord13300
ord6128
ord10672
ord12482
ord5253
ord2338
ord11060
ord3484
ord2945
ord2944
ord2846
ord11103
ord5123
ord5444
ord9286
ord5777
ord6680
ord5776
ord5837
ord7584
ord7510
ord11726
ord13767
ord4724
ord2163
ord11420
ord11421
ord13301
ord7073
ord13299
ord8486
ord3676
ord3618
ord11806
ord7091
ord10883
ord4373
ord1732
ord14075
ord10922
ord13181
ord11413
ord2088
ord1929
ord316
ord901
ord4283
ord1448
ord266
ord1316
ord1294
ord1288
ord888
ord1982
ord3439
ord946
ord948
ord919
ord915
ord12672
ord849
ord1890
ord7141
ord3970
ord4785
ord12868
ord6970
ord4344
ord7871
ord3390
ord1292
ord895
ord1900
ord2611
ord385
ord3254
ord10030
ord1210
ord788
ord7322
ord7581
ord310
ord7144
ord13483
ord13480
ord13485
ord13482
ord13484
ord13481
ord3409
ord5238
ord11172
ord11180
ord4078
ord7355
ord9449
ord11184
ord11153
ord11787
ord4622
ord4903
ord5095
ord8439
ord4881
ord5098
ord13294
ord8070
ord11154
ord6217
ord9994
ord8351
ord2847
ord12644
ord11190
ord11188
ord1496
ord1503
ord4625
ord4774
ord4606
ord6897
ord6898
ord6888
ord4772
ord7357
ord4410
ord4381
ord4393
ord4389
ord1509
ord1514
ord1507
ord9281
ord8304
ord6112
ord6835
ord4385
ord4415
ord4406
ord4377
ord4419

msvcr100

sscanf_s
_setmbcp
__CxxDetectRethrow
__CxxExceptionFilter
__CxxQueryExceptionSize
atoi
__FrameUnwindFilter
__CxxUnregisterExceptionObject
memset
_CxxThrowException
__CxxRegisterExceptionObject
_cexit
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
__getmainargs
_amsg_exit
??3@YAXPAX@Z

kernel32

HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
GetStartupInfoW
LocalFree
PurgeComm
WriteFile
ReadFile
SetCommMask
CloseHandle
CreateFileA
SetupComm
SetCommTimeouts
GetCommState
SetCommState
EncodePointer
SetUnhandledExceptionFilter
DecodePointer
QueryPerformanceCounter
Sleep
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
UnhandledExceptionFilter
IsDebuggerPresent

user32

SetTimer
DrawIcon
GetSystemMetrics
LoadIconW
EnableWindow
KillTimer
SendMessageA
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA

advapi32

RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey

comctl32

InitCommonControlsEx

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd88312b9b34a1e9d56e1b48316e199f

Headers

DLL Characteristics

File Characteristics

Imports

mfc100

msvcr100

kernel32

user32

advapi32

comctl32

mscoree

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 3KB - Virtual size: 31KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 3KB - Virtual size: 31KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB