3bae8d04714bb09f1545e93cafe85b15fd11e25b64ce9c2073a0b36fd0d32835

Sharing

Copy URL Twitter E-mail

General

Target

3bae8d04714bb09f1545e93cafe85b15fd11e25b64ce9c2073a0b36fd0d32835
Size

8.4MB
MD5

0e05413b173770515cbda034e9dee4e9
SHA1

f0b2ae8a4b4e5a5bcd4cd5385f6885ee50c39283
SHA256

3bae8d04714bb09f1545e93cafe85b15fd11e25b64ce9c2073a0b36fd0d32835
SHA512

d51c3b244c5b365a5379e41de465de948cebb516cb1801f32f9b256781870b0532e489efc99311cc3a64862b4ff091908bc6b795ade8cfc407df6adf32937a02
SSDEEP

196608:8B1wwdXuNVLGlcvDXhjYKS8etvbCa2Isqaex05:0u/L6crXhjxQtjLUw05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EG2001_230904.EXE

Files

3bae8d04714bb09f1545e93cafe85b15fd11e25b64ce9c2073a0b36fd0d32835
.zip
EG2001_230904.EXE
.exe windows x86

e2487946ae1a6b469587d3faeee1bcb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
CloseHandle
GetProcAddress
MultiByteToWideChar
SetErrorMode
GetLastError
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateFileA

user32

wsprintfA
EnumWindows
MessageBoxA

advapi32

RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA

msvcrt

atol
_except_handler3
sprintf
printf
atoi
free
strncpy
strlen
malloc

Sections

0000001
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0000002
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0000003
Size: 75KB - Virtual size: 718KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0000004
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0000005
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

0000007
Size: 52KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0000008
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2487946ae1a6b469587d3faeee1bcb8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

0000001 Size: 3.5MB - Virtual size: 3.5MB

0000002 Size: 1.3MB - Virtual size: 1.3MB

0000003 Size: 75KB - Virtual size: 718KB

0000004 Size: 1.4MB - Virtual size: 1.4MB

0000005 Size: 215KB - Virtual size: 216KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

0000007 Size: 52KB - Virtual size: 58KB

0000008 Size: 3.2MB - Virtual size: 3.2MB

0000001
Size: 3.5MB - Virtual size: 3.5MB

0000002
Size: 1.3MB - Virtual size: 1.3MB

0000003
Size: 75KB - Virtual size: 718KB

0000004
Size: 1.4MB - Virtual size: 1.4MB

0000005
Size: 215KB - Virtual size: 216KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

0000007
Size: 52KB - Virtual size: 58KB

0000008
Size: 3.2MB - Virtual size: 3.2MB