bbad3cff61b82bc2bde214c1bafa4bd0ab7f33449d340885531e0ca60ddfcee2

Sharing

Copy URL Twitter E-mail

General

Target

bbad3cff61b82bc2bde214c1bafa4bd0ab7f33449d340885531e0ca60ddfcee2
Size

149KB
MD5

296cc7cd7db25fefd4755aef570418ab
SHA1

a672d01bd85e4e7abf25213639c7f99138768ba3
SHA256

bbad3cff61b82bc2bde214c1bafa4bd0ab7f33449d340885531e0ca60ddfcee2
SHA512

087cc1f4e9da0f99c68be881639dbe336894fd4c6431d9d2222e8d5edb94e419b288f487a2d774f83e33d598f2911dc32547c625985c6da6435216bfa436af05
SSDEEP

1536:7bKF4/q0YYHfv2UcvZMkK+DIn5kYdGm4eHqVkhPjJWP7R1rGwq2zhb8P7ylDjsC:7bKFoq0rH2JXK28HwkPj0hqA8TiDjsC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbad3cff61b82bc2bde214c1bafa4bd0ab7f33449d340885531e0ca60ddfcee2

Files

bbad3cff61b82bc2bde214c1bafa4bd0ab7f33449d340885531e0ca60ddfcee2
.exe windows:5 windows x86

62c882b717c4f5578e826fe57dec372a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FatalAppExitA
GetLastError
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetModuleFileNameW
HeapFree
GetFileAttributesA
IsProcessorFeaturePresent
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
MultiByteToWideChar
HeapAlloc
HeapReAlloc
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
ReadFile
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62c882b717c4f5578e826fe57dec372a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 116KB - Virtual size: 116KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 5KB - Virtual size: 13KB

.idata Size: 3KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 116KB - Virtual size: 116KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 13KB

.idata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 4KB