4b068ac437a7efc01ee86be113146e1e62f91da5fcf49e7f481a136baf919024

General

Target

4b068ac437a7efc01ee86be113146e1e62f91da5fcf49e7f481a136baf919024
Size

9KB
MD5

381b1a170d2c9b3612bf27294f91d492
SHA1

eade78d73d37a484d9efbfe66fcf9706521e170a
SHA256

4b068ac437a7efc01ee86be113146e1e62f91da5fcf49e7f481a136baf919024
SHA512

a2ab4732240e973f7b65a4276dd6b1b2dbdf7e261638f988a77361d58f5cbf19e7786b5d9c3f252bddc275c5c82535cc300234dbf609bdd0c7b81ccb3f634b73
SSDEEP

96:7be1ja330STmSt05OW2QDUdz8J3TjsukccjrLElPQy/cGYIzC7t:7bsj3SXCEpCUdT5ccjr4lBRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b068ac437a7efc01ee86be113146e1e62f91da5fcf49e7f481a136baf919024

Files

4b068ac437a7efc01ee86be113146e1e62f91da5fcf49e7f481a136baf919024
.exe windows:6 windows x64

9fab0b5ed7e783174914217a365d0265

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wininet

HttpQueryInfoW
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenW

msvcr110

_XcptFilter
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
memset
__initenv
_fmode
_commode
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
memcpy
malloc
atoi
ftell
fseek
fread
fopen
__C_specific_handler

kernel32

DecodePointer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
EncodePointer
FreeConsole
VirtualAlloc
CloseHandle
WriteFile
CreateFileA
IsProcessorFeaturePresent

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fab0b5ed7e783174914217a365d0265

Headers

DLL Characteristics

File Characteristics

Imports

wininet

msvcr110

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 276B

.rsrc Size: 1024B - Virtual size: 708B

.reloc Size: 512B - Virtual size: 54B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 276B

.rsrc
Size: 1024B - Virtual size: 708B

.reloc
Size: 512B - Virtual size: 54B