00ca8e8833649b8548e1f0fe5a66136ffb628d254ee12de319fdf58d492a0d97

General

Target

00ca8e8833649b8548e1f0fe5a66136ffb628d254ee12de319fdf58d492a0d97
Size

10.9MB
MD5

728b6fa7fd3f450fa75a6c4ec0e07df7
SHA1

c86246ecc7fcb305a7054433f8a518a8bc596932
SHA256

00ca8e8833649b8548e1f0fe5a66136ffb628d254ee12de319fdf58d492a0d97
SHA512

6b1a2d00d85e2ca321eb9dbf99453dee441ae3c74ab77e867f8ecabbf62eb08b4d224083c12ee111d3a3df0b7adf94fd05fbf618e2bf91fead472e40599149ba
SSDEEP

49152:cAF7Ns/yM3eeyUkFrb/TSvO90d7HjmAFd4A64nsfJ1GfCia+Vx3dQQMCMqzbUvqh:w3u17ADzF3iRiEgNSp5HqxEtwgw5sj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ca8e8833649b8548e1f0fe5a66136ffb628d254ee12de319fdf58d492a0d97

Files

00ca8e8833649b8548e1f0fe5a66136ffb628d254ee12de319fdf58d492a0d97
.exe windows x64

ff9f3a86709796c17211f9df12aae74d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriority
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateWaitableTimerA
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff9f3a86709796c17211f9df12aae74d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.rdata Size: 5.2MB - Virtual size: 5.2MB

.data Size: 308KB - Virtual size: 748KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 83KB - Virtual size: 83KB

.symtab Size: 512B - Virtual size: 4B

.text
Size: 5.3MB - Virtual size: 5.3MB

.rdata
Size: 5.2MB - Virtual size: 5.2MB

.data
Size: 308KB - Virtual size: 748KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 83KB - Virtual size: 83KB

.symtab
Size: 512B - Virtual size: 4B