dd70a5f5035e4b652206c23c2ff4e7396b194a059c86d3eedf947c562b2b013f

Sharing

Copy URL Twitter E-mail

General

Target

dd70a5f5035e4b652206c23c2ff4e7396b194a059c86d3eedf947c562b2b013f
Size

989KB
MD5

e2dd82f6ded31035bfa9bbdb032e17fd
SHA1

7d0584f6b66301861e048eec76f51979b6e42faa
SHA256

dd70a5f5035e4b652206c23c2ff4e7396b194a059c86d3eedf947c562b2b013f
SHA512

817d045ecc8f2f076e51d2c69897f28ddc9ffd9b27b81d52e0f01d4af39d8d72363e086119e21574fc45292317a1c68a7e04c2179b22424d5c470013a8a7627d
SSDEEP

24576:vgWZJKpkZO8GmpFrfMxrFf/wB4GpawKwr:o8YpkZ5ZfUFf/wBtawH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd70a5f5035e4b652206c23c2ff4e7396b194a059c86d3eedf947c562b2b013f

Files

dd70a5f5035e4b652206c23c2ff4e7396b194a059c86d3eedf947c562b2b013f
.exe windows x86

b291b62b1d5ace498744fca84ca010d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA

user32

MessageBeep

msvcp140

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

iphlpapi

GetAdaptersInfo

vcruntime140

_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

fputc

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback

api-ms-win-crt-string-l1-1-0

isdigit

api-ms-win-crt-convert-l1-1-0

_itoa

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-time-l1-1-0

_difftime64

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

msvcrt

strncpy

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 74KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 842KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b291b62b1d5ace498744fca84ca010d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

iphlpapi

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

msvcrt

psapi

advapi32

shell32

Sections

.text Size: 74KB - Virtual size: 232KB

.sedata Size: 842KB - Virtual size: 844KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 67KB - Virtual size: 68KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 74KB - Virtual size: 232KB

.sedata
Size: 842KB - Virtual size: 844KB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 67KB - Virtual size: 68KB

.sedata
Size: 4KB - Virtual size: 4KB