3d87830d510c25d33328056cd698d07800eb7baf87eebe1b786042f9cd402af8

Sharing

Copy URL Twitter E-mail

General

Target

3d87830d510c25d33328056cd698d07800eb7baf87eebe1b786042f9cd402af8
Size

47KB
MD5

f508d99adacf5da05f415f5a595f56a5
SHA1

49f1e7d44024509fa07ff73e57415054d6afc976
SHA256

3d87830d510c25d33328056cd698d07800eb7baf87eebe1b786042f9cd402af8
SHA512

384ca8de6f2d1331244d2ef0ff56adf3cb029062271a11ae36594622f04265ba363915baf4622a2a803b738df631a0243d0c773fee344e19a1147627973c253d
SSDEEP

768:cUSowPf+htQTr1quLXfw6cjSXp0s7R7c6hRCvRYp9s2aU/OhRvw9XGpNu:cUbMf+hGTYuLXfw6O+0sSZeX92Nu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d87830d510c25d33328056cd698d07800eb7baf87eebe1b786042f9cd402af8

Files

3d87830d510c25d33328056cd698d07800eb7baf87eebe1b786042f9cd402af8
.exe windows:5 windows x64

21d2a209e0ecc38172a20f050669ad79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxW
LoadStringW

shell32

CommandLineToArgvW

ole32

OleUninitialize
OleInitialize

msvcrt

_wcmdln
__winitenv
__lconv_init
_initterm
_fpreset
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
memset
memcpy
swprintf
wprintf
malloc
free
wcslen
signal

kernel32

GetTickCount
TlsGetValue
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
SetErrorMode
LoadLibraryExW
GlobalFree
GetProcAddress
GetModuleHandleW
GetLastError
GetCommandLineW
FreeLibrary
QueryPerformanceCounter

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21d2a209e0ecc38172a20f050669ad79

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

msvcrt

kernel32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 64KB

.pdata Size: 512B - Virtual size: 276B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 512B - Virtual size: 52B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 64KB

.pdata
Size: 512B - Virtual size: 276B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 512B - Virtual size: 52B