64ef993475ba9b7e6cb53b9e5d334058a7a117fce0adeefe4004a02c0f37fd8f

Sharing

Copy URL Twitter E-mail

General

Target

64ef993475ba9b7e6cb53b9e5d334058a7a117fce0adeefe4004a02c0f37fd8f
Size

3.2MB
MD5

f15d9b3ab0fbdf7d84106a6db6dffe42
SHA1

437c746d8ccaf4349c21b3645bd699bf2cf949b1
SHA256

64ef993475ba9b7e6cb53b9e5d334058a7a117fce0adeefe4004a02c0f37fd8f
SHA512

f32fc805aae06da7de6ba62f251b1fafc1315370afc05c531b5aa06ea39f488707be5d063557c79372d248c94574ef8d3c8b607f3018bf863cce18339cba18cd
SSDEEP

49152:jpA8kkzVEYGAJbh9PFnL0iPPmdrjAfZL2txdiCvREkrs6k+:jpA1k+AJbDtLnPPmdfktoxdvvik46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ef993475ba9b7e6cb53b9e5d334058a7a117fce0adeefe4004a02c0f37fd8f

Files

64ef993475ba9b7e6cb53b9e5d334058a7a117fce0adeefe4004a02c0f37fd8f
.exe windows:4 windows x86

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleExA
RtlMoveMemory
lstrcpynA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetTickCount
FreeLibrary
LoadLibraryA
LCMapStringA

msvcrt

srand
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_atoi64
atof
atoi
free
malloc
_ftol
rand
strchr
modf
realloc
memmove
strncmp
__CxxFrameHandler

user32

MessageBoxA
wsprintfA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
SetWindowLongA
ShowWindow
GetDlgItem
SetWindowTextA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
CreateDialogIndirectParamA

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvmp0
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp3
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 708KB - Virtual size: 707KB

.rdata Size: 348KB - Virtual size: 346KB

.data Size: 104KB - Virtual size: 341KB

.rsrc Size: 36KB - Virtual size: 35KB

.xvmp0 Size: 32KB - Virtual size: 32KB

.xvmp1 Size: 2.0MB - Virtual size: 2.0MB

.xvmp2 Size: 4KB - Virtual size: 4KB

.xvmp3 Size: 40KB - Virtual size: 40KB

.text
Size: 708KB - Virtual size: 707KB

.rdata
Size: 348KB - Virtual size: 346KB

.data
Size: 104KB - Virtual size: 341KB

.rsrc
Size: 36KB - Virtual size: 35KB

.xvmp0
Size: 32KB - Virtual size: 32KB

.xvmp1
Size: 2.0MB - Virtual size: 2.0MB

.xvmp2
Size: 4KB - Virtual size: 4KB

.xvmp3
Size: 40KB - Virtual size: 40KB