90807f80d6c989b9548282b791d683c7eeb6213d5399ee55e91015a5ce0cfe30

Sharing

Copy URL

Twitter E-mail

General

Target

90807f80d6c989b9548282b791d683c7eeb6213d5399ee55e91015a5ce0cfe30
Size

6.7MB
MD5

3b7f77dcd59c98e629e3c3a67766981d
SHA1

e48b88200d06f5013156bf3f442f7954da732b0f
SHA256

90807f80d6c989b9548282b791d683c7eeb6213d5399ee55e91015a5ce0cfe30
SHA512

fb621bd227fda57c02b9dcae2fa26db493e65280837f6f9f9e6207b7d1213a1218fa14ded4cf42893aa43cb8e3526bf503bd2fd8528963ac0e5ec30a23dbfa6a
SSDEEP

196608:YkB9Z7jlZy9yVp/xfkmj87uFPKJDbGwOp:YW99vy9yr/xfkmj82CJDbGwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90807f80d6c989b9548282b791d683c7eeb6213d5399ee55e91015a5ce0cfe30

Files

90807f80d6c989b9548282b791d683c7eeb6213d5399ee55e91015a5ce0cfe30
.exe windows:5 windows x86

46162b21340800f4892155f577c8524a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

kernel32

WideCharToMultiByte
OpenProcess
CreateToolhelp32Snapshot
Process32First
GetModuleFileNameA
Sleep
LocalAlloc
CreateEventA
CreateThread
WaitForSingleObject
WriteFile
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
SetFilePointer
SetStdHandle
Process32Next
CreateFileW
WriteConsoleW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadLibraryW
GetStringTypeW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
GetCommandLineA
HeapSetInformation
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetStdHandle
GetModuleFileNameW
GetStartupInfoW
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
QueryServiceConfigA
EnumServicesStatusA
DeleteService
QueryServiceStatus
ControlService
OpenServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
CreateProcessAsUserA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
StartServiceCtrlDispatcherA

shlwapi

PathFileExistsA

psapi

EnumProcessModules
EnumProcesses
GetModuleFileNameExA

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lcs0
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lcs1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lcs2
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

46162b21340800f4892155f577c8524a

Headers

DLL Characteristics

File Characteristics

Imports

userenv

kernel32

advapi32

shlwapi

psapi

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 12KB

.lcs0 Size: 2.1MB - Virtual size: 2.1MB

.lcs1 Size: 4KB - Virtual size: 4KB

.lcs2 Size: 4.5MB - Virtual size: 4.5MB

.reloc Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.l1 Size: 4KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 12KB

.lcs0
Size: 2.1MB - Virtual size: 2.1MB

.lcs1
Size: 4KB - Virtual size: 4KB

.lcs2
Size: 4.5MB - Virtual size: 4.5MB

.reloc
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.l1
Size: 4KB - Virtual size: 4KB