399e2054ff45faf62d6fcd874209dafe7f5efc741867b31a91e4eeb2491e8813

Sharing

Copy URL Twitter E-mail

General

Target

399e2054ff45faf62d6fcd874209dafe7f5efc741867b31a91e4eeb2491e8813
Size

351KB
MD5

726a0d938c93db98e5f7c247612779f5
SHA1

ab2e27f3f5bb9b4eb48c5ca1618242df55fe0a23
SHA256

399e2054ff45faf62d6fcd874209dafe7f5efc741867b31a91e4eeb2491e8813
SHA512

e66101ddea5b3fd2d7b9897e37a9d0731a7ae59cf2eff0047513bc45d21d42dfb865964e56fcc896bee096a52fd72e5829cc1e1d0375f716187217c3dc20cbec
SSDEEP

6144:30KSeNnihTh8tQGv8WELTK078XAiZicBt7lTBpC3kNWESP1wfy0GR6:3dXnm1eIylBt7lTG0cfPyfy0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399e2054ff45faf62d6fcd874209dafe7f5efc741867b31a91e4eeb2491e8813

Files

399e2054ff45faf62d6fcd874209dafe7f5efc741867b31a91e4eeb2491e8813
.exe windows x64

885d4c6643e07575ef404c7e0b64075a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentProcess
GetCurrentProcessId
HeapAlloc
CreateThread
GetModuleHandleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetLocaleInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsFree
GetProcAddress
SetLastError
GetProcessHeap
HeapFree
SetEndOfFile
WriteFile
CreateFileA
lstrcpyW
CreateMutexA
CopyFileA
TerminateProcess
GetTickCount
OpenFileMappingA
CreateFileMappingA
CreateFileW
ReadFile
MapViewOfFile
GetFileSize
WideCharToMultiByte
GlobalFree
GetLastError
MultiByteToWideChar
OutputDebugStringW
CloseHandle
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
lstrcmpW
OpenProcess
UnmapViewOfFile
Sleep
GetModuleFileNameA
FlsSetValue
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
GetStartupInfoW
GetFileType
SetHandleCount
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetStdHandle
ExitProcess
HeapCreate
GetVersion
HeapSetInformation
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CompareStringW
GetCPInfo
LCMapStringW
LoadLibraryW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
RtlLookupFunctionEntry
GetCommandLineA
GetSystemTimeAsFileTime
HeapReAlloc
GetCurrentThreadId
ExitThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DecodePointer
EncodePointer
GetStringTypeW
WriteConsoleW

advapi32

RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

shell32

ShellExecuteA

iphlpapi

GetBestInterface
GetAdaptersInfo

winhttp

WinHttpOpen
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpWriteData
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetOption
WinHttpSetTimeouts
WinHttpReceiveResponse
WinHttpCrackUrl
WinHttpReadData
WinHttpAddRequestHeaders
WinHttpConnect
WinHttpGetProxyForUrl

shlwapi

PathRemoveFileSpecA
PathStripPathA
StrStrIA
PathRemoveExtensionA

ws2_32

WSACleanup
gethostname
gethostbyname
WSAStartup
inet_addr

Sections

.text
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

885d4c6643e07575ef404c7e0b64075a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

iphlpapi

winhttp

shlwapi

ws2_32

Sections

.text Size: 201KB - Virtual size: 201KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 10KB - Virtual size: 20KB

.pdata Size: 11KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 201KB - Virtual size: 201KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 10KB - Virtual size: 20KB

.pdata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 3KB - Virtual size: 2KB