24fe2a48a743c0fefb3f566b9ae6ebe5dd2854166122ff968f644e9b798abd84

Sharing

Copy URL Twitter E-mail

General

Target

24fe2a48a743c0fefb3f566b9ae6ebe5dd2854166122ff968f644e9b798abd84
Size

1.6MB
MD5

3370c04c357e733a15ff71ce027b3d8d
SHA1

e966d499094b05bc367029515354d6ec646893ab
SHA256

24fe2a48a743c0fefb3f566b9ae6ebe5dd2854166122ff968f644e9b798abd84
SHA512

f57237d938dde078d4d49c17529c4bb12ec4a5f25cab554ab2f0b526c6019751781edc9ac33d61cc8b7c93ef78f696b335f24367353d4cf6e7a4919a283c7008
SSDEEP

49152:YpBGyV0RgjqL2Q8yEbG7HLmvGbmFn1Tv0h:YpXO2qL2Q8y17CvwGdv0h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24fe2a48a743c0fefb3f566b9ae6ebe5dd2854166122ff968f644e9b798abd84

Files

24fe2a48a743c0fefb3f566b9ae6ebe5dd2854166122ff968f644e9b798abd84
.exe windows:6 windows x86

0994071312d5bf17d1eac1ef02d238ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SizeofResource
WriteProcessMemory
VirtualFree
VirtualAlloc
TerminateProcess
ResumeThread
FreeResource
LockResource
CloseHandle
LoadLibraryW
LoadResource
FindResourceW
VirtualProtectEx
GetThreadContext
GetProcAddress
ReadProcessMemory
GetModuleHandleW
FreeLibrary
CreateProcessA
SetThreadContext
VirtualQueryEx
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
UnhandledExceptionFilter

vcruntime140

_except_handler4_common
memset
__std_exception_destroy
__current_exception
memmove
__current_exception_context
__std_exception_copy
_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

getchar
__p__commode
_set_fmode

api-ms-win-crt-runtime-l1-1-0

_c_exit
_register_onexit_function
_crt_atexit
_controlfp_s
_initterm
_seh_filter_exe
_set_app_type
_register_thread_local_exe_atexit_callback
_cexit
_initialize_onexit_table
_exit
exit
_initterm_e
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
malloc
_set_new_mode
_callnewh

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0994071312d5bf17d1eac1ef02d238ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1024B

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1024B

.rsrc
Size: 1.6MB - Virtual size: 1.6MB