f6f3a7d7bdae13b848f12d6e8e6b0b498806c2b9e0c27dc76e5bf4a77e89f1ca

Sharing

Copy URL Twitter E-mail

General

Target

f6f3a7d7bdae13b848f12d6e8e6b0b498806c2b9e0c27dc76e5bf4a77e89f1ca
Size

1.5MB
MD5

484ec5ff7ef99642df47752c4f790c0d
SHA1

7f5c5a486356a274b236756550999a1f0d94d479
SHA256

f6f3a7d7bdae13b848f12d6e8e6b0b498806c2b9e0c27dc76e5bf4a77e89f1ca
SHA512

23156cab7c2a369c470faba6f2560a32d1b58335dc8bb5cff1772ecc66d3d54446e4a3b0bca84a9f06f508b7cf5dd0b5b95e5a8d79017ea4df570cae43036fd6
SSDEEP

24576:qx/JS7xBCY8mGFgeA6BxW2Kr4SoBni2qtRDIe7Ax94Vjq2vbnIJ6VwdY1:4/QVBCYtGFpA+xq4DnTcDIekUxq2zy6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6f3a7d7bdae13b848f12d6e8e6b0b498806c2b9e0c27dc76e5bf4a77e89f1ca

Files

f6f3a7d7bdae13b848f12d6e8e6b0b498806c2b9e0c27dc76e5bf4a77e89f1ca
.exe windows:5 windows x86

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetProcAddress
LoadLibraryExW
SizeofResource
LockResource
LoadLibraryW
FindResourceW
WriteFile
GetModuleFileNameW
CreateFileW
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetTempPathW
GetFileAttributesW
GetCurrentDirectoryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
GetCurrentThreadId
Sleep
RaiseException
GetCommandLineW
SetFilePointerEx
FlushFileBuffers
FindFirstFileExW
FindNextFileW
FindClose
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleExW
GetVersionExW
GetNativeSystemInfo
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetEnvironmentVariableW
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
IsValidCodePage
GetDriveTypeW
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
HeapReAlloc
ExitProcess
HeapSize
GetFileType
SetStdHandle
GetFullPathNameW
GetConsoleMode
GetConsoleCP
LoadLibraryExA
HeapFree
LoadLibraryA
HeapAlloc
GetProcessHeap
IsBadReadPtr
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind

ole32

CoTaskMemFree

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ress
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 3KB - Virtual size: 11KB

.gfids Size: 512B - Virtual size: 444B

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 8KB - Virtual size: 7KB

.ress Size: 10.5MB - Virtual size: 10.5MB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 3KB - Virtual size: 11KB

.gfids
Size: 512B - Virtual size: 444B

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 8KB - Virtual size: 7KB

.ress
Size: 10.5MB - Virtual size: 10.5MB