d52ca41d448a56f74e7c941a8d461da4ffb845b7ca92eb2b5ff0c50c2294e9c2

Sharing

Copy URL Twitter E-mail

General

Target

d52ca41d448a56f74e7c941a8d461da4ffb845b7ca92eb2b5ff0c50c2294e9c2
Size

71KB
MD5

6a92daf5ef9c659bf7a74fd35618c618
SHA1

cfcae7ce11ed21f79e7be8bfd8613fe3c231fb0f
SHA256

d52ca41d448a56f74e7c941a8d461da4ffb845b7ca92eb2b5ff0c50c2294e9c2
SHA512

df1b2ff023d7e85cf1d6eb234b64c11e5bd308ecf317f3bbc1c67a02836138872f6ab8fba082996aa53c673f110a42ec696ae2b2144652b307809a4db7e4f1bc
SSDEEP

1536:VbQx7H4BATLJ9bKgF6wb06D9NtsB3+ag9VJW+L5o:Cx7YCHJ9bKG6eSB3CVJWc5o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d52ca41d448a56f74e7c941a8d461da4ffb845b7ca92eb2b5ff0c50c2294e9c2

Files

d52ca41d448a56f74e7c941a8d461da4ffb845b7ca92eb2b5ff0c50c2294e9c2
.exe windows:5 windows x64

d3dcf7bdc4d8fb5a87e5c1a36f902ba6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ConvertThreadToFiber
GetTimeZoneInformation
VirtualProtect
CreateFiber
SwitchToFiber
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
LCMapStringW
LCMapStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetLastError
HeapFree
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
WideCharToMultiByte
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
CreateFileA

winhttp

WinHttpCloseHandle
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpConnect
WinHttpOpen

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3dcf7bdc4d8fb5a87e5c1a36f902ba6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winhttp

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 13KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 996B

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 13KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 996B