a912f2ede636dc70fe7a0e4318cc80d7a2480b23b2314fde2e255ca9f7f5e82c

Sharing

Copy URL

Twitter E-mail

General

Target

a912f2ede636dc70fe7a0e4318cc80d7a2480b23b2314fde2e255ca9f7f5e82c
Size

13.4MB
MD5

0c83596a15cbca90930dd30b42660182
SHA1

0cfac77402ab1c0fa89633184292764fe606bdcc
SHA256

a912f2ede636dc70fe7a0e4318cc80d7a2480b23b2314fde2e255ca9f7f5e82c
SHA512

d6391a6bbb5fae3f98e99a6e33c56f3d9f345977abce46e1b312dc6cbd6cb6287ef3a1fa9eac752ddb781c7c9dcce53b6bb14788bb860e87a075783f5879778e
SSDEEP

98304:aS9qtSkMNWQfpEj4Ab5FE7Nm3z2LmfHhP0TLUG0nvOduW+DlPEAAlw:N9J8j4O32LmvhcTwGoWduW+pj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a912f2ede636dc70fe7a0e4318cc80d7a2480b23b2314fde2e255ca9f7f5e82c

Files

a912f2ede636dc70fe7a0e4318cc80d7a2480b23b2314fde2e255ca9f7f5e82c
.exe windows:6 windows x86

01ece34e7ad30aa824ba38d3de40c71d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
PostQueuedCompletionStatus
QueryPerformanceCounter
ResumeThread
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFile

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthread
_cexit
_errno
_exit
_fmode
_initterm
_iob
_lock
_onexit
_snwprintf
_unlock
calloc
exit
fprintf
free
fwprintf
fwrite
malloc
memcpy
memset
raise
realloc
signal
sprintf
strcmp
strlen
strncmp
_vsnprintf
abort
vfprintf
wcscpy
atoi

user32

ActivateKeyboardLayout
CallNextHookEx
DispatchMessageA
EnumDisplayMonitors
GetAsyncKeyState
GetDoubleClickTime
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetMessageA
GetMessageTime
GetSystemMetrics
GetWindowThreadProcessId
MessageBoxW
PostThreadMessageA
SendInput
SetWinEventHook
SetWindowsHookExA
SystemParametersInfoA
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx

Exports

Exports

_cgo_dummy_export
go_send
hook_create_screen_info
hook_get_auto_repeat_delay
hook_get_auto_repeat_rate
hook_get_multi_click_time
hook_get_pointer_acceleration_multiplier
hook_get_pointer_acceleration_threshold
hook_get_pointer_sensitivity
hook_post_event
hook_run
hook_set_dispatch_proc
hook_set_keyboard_disabled
hook_set_keyboard_enabled
hook_set_logger
hook_stop

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 767KB - Virtual size: 767KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 227KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01ece34e7ad30aa824ba38d3de40c71d

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 6.4MB - Virtual size: 6.4MB

.data Size: 767KB - Virtual size: 767KB

.rdata Size: 5.7MB - Virtual size: 5.7MB

.bss Size: - Virtual size: 227KB

.edata Size: 1024B - Virtual size: 576B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 114KB - Virtual size: 113KB

.reloc Size: 297KB - Virtual size: 297KB

.text
Size: 6.4MB - Virtual size: 6.4MB

.data
Size: 767KB - Virtual size: 767KB

.rdata
Size: 5.7MB - Virtual size: 5.7MB

.bss
Size: - Virtual size: 227KB

.edata
Size: 1024B - Virtual size: 576B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 114KB - Virtual size: 113KB

.reloc
Size: 297KB - Virtual size: 297KB