a616e142c7496eb727387cb44e461184bfa29ddc6fd604939a0ed2e3c334929f

Sharing

Copy URL Twitter E-mail

General

Target

a616e142c7496eb727387cb44e461184bfa29ddc6fd604939a0ed2e3c334929f
Size

62KB
MD5

681355ae4866d0f2a2b49a11e0191895
SHA1

dd202103b0c10a893540d10c627521c58903fd11
SHA256

a616e142c7496eb727387cb44e461184bfa29ddc6fd604939a0ed2e3c334929f
SHA512

34f055736e51ab84323338367281b3d48465a64ba26246219658d1d728f37a8a14daf53e826b3de4ef53fd4f17199b9c0319a73f8d0cf12be3e82a990e5f4d60
SSDEEP

768:82r5VSp+hpibHFeDdIajJ+tTFktKuZvETUP8lmtTKMPgoY5X5qYfuXdUzD:pSp+hMbHFKdF4gKUvpUYtOLxLutO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a616e142c7496eb727387cb44e461184bfa29ddc6fd604939a0ed2e3c334929f

Files

a616e142c7496eb727387cb44e461184bfa29ddc6fd604939a0ed2e3c334929f
.exe windows:5 windows x64

d350d90ee2cc02a314f16ffdd73d674c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

DefFrameProcW
TranslateMessage
TranslateMDISysAccel
GetMessageW
DispatchMessageW
LoadStringW
UnregisterClassW
ShowWindow
SetWindowTextW
SetWindowPos
SetWindowLongPtrW
SetMenu
SendMessageW
RegisterClassExW
PostQuitMessage
PostMessageW
LoadMenuW
LoadIconW
LoadCursorW
GetWindowTextW
GetWindowLongPtrW
GetSubMenu
GetClientRect
DestroyWindow
DestroyMenu
DefMDIChildProcW
CreateWindowExW

comdlg32

GetSaveFileNameW

shell32

ShellAboutW

comctl32

InitCommonControls

msvcrt

__lconv_init
_fpreset
memset
wcscpy
wcslen
memcpy
malloc
__setusermatherr
_amsg_exit
__wgetmainargs
__set_app_type
exit
_cexit
_initterm
__winitenv
_wcmdln
signal

kernel32

LeaveCriticalSection
InitializeCriticalSection
GetLastError
EnterCriticalSection
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
TlsGetValue
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
GetProcAddress
LockResource
LocalAlloc
LoadResource
FormatMessageW
FindResourceW
LocalFree
HeapFree
HeapAlloc
GetModuleHandleW
GetCurrentProcessId
GetProcessHeap

ntdll

DbgPrint

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d350d90ee2cc02a314f16ffdd73d674c

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

comctl32

msvcrt

kernel32

ntdll

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 288B

.pdata Size: 1024B - Virtual size: 552B

.rsrc Size: 43KB - Virtual size: 43KB

.reloc Size: 512B - Virtual size: 28B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 288B

.pdata
Size: 1024B - Virtual size: 552B

.rsrc
Size: 43KB - Virtual size: 43KB

.reloc
Size: 512B - Virtual size: 28B