96cdf92e9aee602138d0eb68a8579f98da5c96f5849d61bc8961a4405d33275f

Sharing

Copy URL

Twitter E-mail

General

Target

96cdf92e9aee602138d0eb68a8579f98da5c96f5849d61bc8961a4405d33275f
Size

5.1MB
MD5

ee159605c7719de929ea2cde00d9548b
SHA1

bbaa7c18f63c4a5fc913c581452f8ef6880026e2
SHA256

96cdf92e9aee602138d0eb68a8579f98da5c96f5849d61bc8961a4405d33275f
SHA512

f5733fe39a52a67f9b7b5a7560241c403fc121730b424b9edfad15409cc9a309d3de31c2e5832a376c58a4039abcd7e7c35f660254892c6ab6f56afa2f3f38b2
SSDEEP

98304:3knMKAHojN6/WoirFJ3ddrVqkV9qy6CVf/T51nH3PgWUoi/MC:3NKAm6+tFXRVqkVLtfXH3Pp53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96cdf92e9aee602138d0eb68a8579f98da5c96f5849d61bc8961a4405d33275f

Files

96cdf92e9aee602138d0eb68a8579f98da5c96f5849d61bc8961a4405d33275f
.exe windows x64

026059799a399d9dd02f4c1312534714

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetTempPathA
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DefWindowProcA
CharUpperBuffW

ws2_32

connect

cabinet

ord23

iphlpapi

IcmpSendEcho

Sections

.text
Size: - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.~D\
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.FPc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m7$
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

026059799a399d9dd02f4c1312534714

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

cabinet

iphlpapi

Sections

.text Size: - Virtual size: 95KB

.rdata Size: - Virtual size: 46KB

.data Size: - Virtual size: 7KB

.pdata Size: - Virtual size: 6KB

.~D\ Size: - Virtual size: 3.1MB

.FPc Size: 3KB - Virtual size: 2KB

.m7$ Size: 5.0MB - Virtual size: 5.0MB

.reloc Size: 512B - Virtual size: 152B

.rsrc Size: 92KB - Virtual size: 91KB

.text
Size: - Virtual size: 95KB

.rdata
Size: - Virtual size: 46KB

.data
Size: - Virtual size: 7KB

.pdata
Size: - Virtual size: 6KB

.~D\
Size: - Virtual size: 3.1MB

.FPc
Size: 3KB - Virtual size: 2KB

.m7$
Size: 5.0MB - Virtual size: 5.0MB

.reloc
Size: 512B - Virtual size: 152B

.rsrc
Size: 92KB - Virtual size: 91KB