4f5656810a627187d7997d258ce28bcbe8bf76849c6a0baacd000f5f71dcfbc8

Sharing

Copy URL Twitter E-mail

General

Target

4f5656810a627187d7997d258ce28bcbe8bf76849c6a0baacd000f5f71dcfbc8
Size

93KB
MD5

7f0b628fa7442ef22b47c64de0324386
SHA1

78560c7495409b4e37e8a2e38a8fb7ab39768a65
SHA256

4f5656810a627187d7997d258ce28bcbe8bf76849c6a0baacd000f5f71dcfbc8
SHA512

a89de669a6e5ad507fc0e3c89a8163fae96023652778cc644051d31d8a484e50bedb19b6e076689f4912061e0c2db9c6af0081377e939a77da3945c0defd81ae
SSDEEP

1536:KQsbb1yS5XnR7W43KvrMb/no7k9WsYAYo5fHKendkRX5xI9f:2P19ndW43hznoY3rY6ndkRX5xS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f5656810a627187d7997d258ce28bcbe8bf76849c6a0baacd000f5f71dcfbc8

Files

4f5656810a627187d7997d258ce28bcbe8bf76849c6a0baacd000f5f71dcfbc8
.exe windows x64

c478c0cf9a6696897730161c4e8689ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrlenA
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
Sleep
GetLastError
GetCurrentThreadId
LeaveCriticalSection
CreateFileA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetLastError
TerminateProcess
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DeleteFileA
_lcreat
_lwrite
_lclose
SetStdHandle
FlushFileBuffers
CloseHandle
InitializeCriticalSectionAndSpinCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapFree
GetProcessHeap
RtlLookupFunctionEntry
RtlUnwindEx
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
RaiseException
RtlPcToFileHeader
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetConsoleCP
GetConsoleMode
HeapSetInformation
HeapCreate
GetModuleHandleW
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
HeapSize

user32

wsprintfA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c478c0cf9a6696897730161c4e8689ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 7KB - Virtual size: 16KB

.pdata Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 7KB - Virtual size: 16KB

.pdata
Size: 4KB - Virtual size: 3KB