7f00c171b74322149b9e4d0b1da0e36608f3821a1a953a11362ecbed0f0b4408

Sharing

Copy URL Twitter E-mail

General

Target

7f00c171b74322149b9e4d0b1da0e36608f3821a1a953a11362ecbed0f0b4408
Size

468KB
MD5

2c3bfea6439fb35de68fc72121e7954f
SHA1

382d956032b2dd8ec87a0dfb60a686ed44a8a48b
SHA256

7f00c171b74322149b9e4d0b1da0e36608f3821a1a953a11362ecbed0f0b4408
SHA512

333c4a22744d5262d0552a935737e1eebc585c92d070e1e5dd93865b2ad64e7313b0845696ee97d9656c8d82698c66d5766ff26befe4686a32ecf474bf60345d
SSDEEP

6144:GX+PmjYP7S2/Txy3JQ3y3EY9m5i4hlqdy6h4zpda+21+7FGyMpLd9WQZtgprxVs+:JPmjYemTkJQ3y08m5l+6veYkjbLNHe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f00c171b74322149b9e4d0b1da0e36608f3821a1a953a11362ecbed0f0b4408

Files

7f00c171b74322149b9e4d0b1da0e36608f3821a1a953a11362ecbed0f0b4408
.exe windows x86

6b13ec9445cde26c3849313148da3b7d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
FindClose
ReleaseSRWLockShared
CompareStringOrdinal
GetLastError
AddVectoredExceptionHandler
SetThreadStackGuarantee
AcquireSRWLockExclusive
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
GetProcAddress
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCommandLineW
FlushFileBuffers
DuplicateHandle
SetFilePointerEx
GetStdHandle
GetCurrentProcessId
WriteFileEx
SleepEx
ReadFileEx
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
TryAcquireSRWLockExclusive
QueryPerformanceCounter
GetProcessHeap
HeapAlloc
HeapFree
TlsSetValue
HeapReAlloc
AcquireSRWLockShared
FreeEnvironmentStringsW
LoadLibraryA
CreateMutexA
TlsGetValue
GetModuleHandleA
FindNextFileW
CreateFileW
GetConsoleMode
GetFileType
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
ExitProcess
GetFullPathNameW
CreateNamedPipeW
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
MultiByteToWideChar
WriteConsoleW
WideCharToMultiByte
CreateThread
InitOnceBeginInitialize
TlsAlloc
InitOnceComplete
TlsFree
GetSystemTimeAsFileTime
ReleaseSRWLockExclusive
WaitForSingleObjectEx
CloseHandle
GetConsoleOutputCP
HeapSize
LCMapStringW
CompareStringW
GetStringTypeW
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetCommandLineA
GetModuleHandleExW
WriteFile
LoadLibraryExW
FreeLibrary
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DecodePointer

advapi32

SystemFunction036

bcrypt

BCryptGenRandom

ntdll

RtlNtStatusToDosError
NtWriteFile

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b13ec9445cde26c3849313148da3b7d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

bcrypt

ntdll

Sections

.text Size: 213KB - Virtual size: 212KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 189KB - Virtual size: 189KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 213KB - Virtual size: 212KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 189KB - Virtual size: 189KB

.reloc
Size: 10KB - Virtual size: 9KB