771297d1e607a8a21b72e859add8f3bd66107c94864d1c315c94c85eada894fe

Sharing

Copy URL Twitter E-mail

General

Target

771297d1e607a8a21b72e859add8f3bd66107c94864d1c315c94c85eada894fe
Size

868KB
MD5

cd1ac5261d366b2e704fc0a1e383101b
SHA1

b7ede7e15c45fc4b6466124b37fb26bd3636d872
SHA256

771297d1e607a8a21b72e859add8f3bd66107c94864d1c315c94c85eada894fe
SHA512

9afff1e05a17bfff3830d9eb1f16f09e1f986e3c921453b7f25c8f7b37c39d97f6a8105d851370e398a1f6501ea7559ca7d61096009e5f382fe86b3cfb8d0641
SSDEEP

24576:qx/JS7xBCY8mGFgeA6BxW2Kr4SoBni2qtRD1:4/QVBCYtGFpA+xq4DnTcD1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
771297d1e607a8a21b72e859add8f3bd66107c94864d1c315c94c85eada894fe

Files

771297d1e607a8a21b72e859add8f3bd66107c94864d1c315c94c85eada894fe
.exe windows:5 windows x86

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetProcAddress
LoadLibraryExW
SizeofResource
LockResource
LoadLibraryW
FindResourceW
WriteFile
GetModuleFileNameW
CreateFileW
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetTempPathW
GetFileAttributesW
GetCurrentDirectoryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
GetCurrentThreadId
Sleep
RaiseException
GetCommandLineW
SetFilePointerEx
FlushFileBuffers
FindFirstFileExW
FindNextFileW
FindClose
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleExW
GetVersionExW
GetNativeSystemInfo
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetEnvironmentVariableW
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
IsValidCodePage
GetDriveTypeW
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
HeapReAlloc
ExitProcess
HeapSize
GetFileType
SetStdHandle
GetFullPathNameW
GetConsoleMode
GetConsoleCP
LoadLibraryExA
HeapFree
LoadLibraryA
HeapAlloc
GetProcessHeap
IsBadReadPtr
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind

ole32

CoTaskMemFree

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ress
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 3KB - Virtual size: 11KB

.gfids Size: 512B - Virtual size: 444B

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 8KB - Virtual size: 7KB

.ress Size: 10.5MB - Virtual size: 10.5MB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 3KB - Virtual size: 11KB

.gfids
Size: 512B - Virtual size: 444B

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 8KB - Virtual size: 7KB

.ress
Size: 10.5MB - Virtual size: 10.5MB