5b87d0f04aeddd903761caf0abe2a1a318eb83ae34431f0067051999fbed89b5

Sharing

Copy URL Twitter E-mail

General

Target

5b87d0f04aeddd903761caf0abe2a1a318eb83ae34431f0067051999fbed89b5
Size

1.2MB
MD5

40f858e2b3f3215843dd8be07a8e59dd
SHA1

c35644b7f136d42096da844fabca965dc787572e
SHA256

5b87d0f04aeddd903761caf0abe2a1a318eb83ae34431f0067051999fbed89b5
SHA512

b2dc63b903589cab8880d31b84402f829af29889e636f1600c8da92874358ee6e9ffb0af8ad2f4d208b311ac22277875d75684b4af91a39777af68f6776f2728
SSDEEP

6144:cWK/NI6z1xzaXlv2otBcsw2c+Zl8cwoKG2+LzIlMMdPBCj2/ycTbaggwu0K0uPke:cWK/NIIbzaXB2CcC3LLIxq3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b87d0f04aeddd903761caf0abe2a1a318eb83ae34431f0067051999fbed89b5

Files

5b87d0f04aeddd903761caf0abe2a1a318eb83ae34431f0067051999fbed89b5
.exe windows:5 windows x86

4dad5ab1238a5799d3ad4edb0f978399

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW

user32

LoadStringW
MessageBeep

msvcrt

__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
sprintf
bsearch
strcspn
strchr
strlen
strcmp
strcpy
memcmp
wcstok
_getdrive
isalnum
isalpha
_errno
_snwprintf
_wcsupr
_wgetdcwd
_wpopen
_wfopen
fgetws
_pclose
fclose
qsort
memmove
_wcslwr
memchr
free
vswprintf
wcsstr
_wcsnset
wcspbrk
wcsncat
wcscpy
wcscmp
_wchdir
towupper
_wtol
wcstoul
wcstol
_itow
rand
_vsnwprintf
swprintf
_wcsnicmp
_wtoi
memcpy
_wcsicmp
wcsrchr
wcsncpy
wcscat
wcslen
memset
wcsspn
wcsncmp
wcscspn
wcschr
_wcsdup
iswctype
towlower
malloc
realloc

kernel32

TlsGetValue
GetModuleHandleA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
HeapReAlloc
LockResource
LoadResource
FindResourceExW
FlushFileBuffers
WriteConsoleW
WideCharToMultiByte
HeapFree
HeapAlloc
GetProcessHeap
LocalReAlloc
LocalAlloc
GetEnvironmentVariableA
GetVersionExW
GetFileType
SetProcessAffinityMask
ResumeThread
GetEnvironmentStringsW
FreeEnvironmentStringsW
MoveFileW
WriteConsoleOutputCharacterW
FillConsoleOutputCharacterW
MoveFileExW
CopyFileW
DeviceIoControl
GlobalMemoryStatus
GetLocaleInfoW
GetDateFormatW
RemoveDirectoryW
CreateDirectoryW
lstrcmpW
lstrcmpiW
LocalFree
FormatMessageW
GetVolumePathNameW
GetVolumeInformationW
GetDiskFreeSpaceW
Sleep
SetLocalTime
GetLocalTime
FreeConsole
AllocConsole
GetCurrentProcess
DuplicateHandle
WriteFile
VirtualFree
VirtualAlloc
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
GetSystemTime
GetFileTime
GetFileAttributesW
FindNextFileW
DeleteFileW
CopyFileExW
SetConsoleTitleW
SetConsoleTextAttribute
SetConsoleCursorPosition
SetConsoleCursorInfo
GetConsoleMode
FlushConsoleInputBuffer
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
WriteConsoleInputW
SetConsoleMode
SetConsoleCtrlHandler
GetConsoleTitleW
GetConsoleOutputCP
GetConsoleCP
WaitForMultipleObjects
TryEnterCriticalSection
TerminateProcess
SetStdHandle
lstrlenW
AddConsoleAliasW
GetConsoleAliasW
GetConsoleAliasesW
GetConsoleAliasesLengthW
CloseHandle
CreateFileW
GetFileSize
GetFullPathNameW
ReadFile
SetFilePointer
SetLastError
MultiByteToWideChar
Beep
GetStdHandle
GetTickCount
WaitForSingleObject
ReadConsoleInputW
CreatePipe
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FreeLibrary
GetCommandLineW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetExitCodeProcess
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
SearchPathW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetFileApisToOEM
SetHandleInformation

ntdll

vDbgPrintExWithPrefix
_allmul
RtlAssert
RtlIsDosDeviceName_U
_aullrem

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1020KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4dad5ab1238a5799d3ad4edb0f978399

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

msvcrt

kernel32

ntdll

Sections

.text Size: 154KB - Virtual size: 154KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 2KB - Virtual size: 96KB

.rsrc Size: 1020KB - Virtual size: 1020KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 154KB - Virtual size: 154KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 96KB

.rsrc
Size: 1020KB - Virtual size: 1020KB

.reloc
Size: 9KB - Virtual size: 9KB