69abb3d122882046ad213f62e4502f6d2d126586cb54f764511df5ae130f5751

Sharing

Copy URL

Twitter E-mail

General

Target

69abb3d122882046ad213f62e4502f6d2d126586cb54f764511df5ae130f5751
Size

224KB
MD5

206a1fc3da0da6b7727e06d11eb36800
SHA1

b9f8be8cfe4cd72fb31da9bba986c40be44142e9
SHA256

69abb3d122882046ad213f62e4502f6d2d126586cb54f764511df5ae130f5751
SHA512

0f6b40c43aa5c1b98953e11bb5db3ebf0f5124dc8d142ca30b5756be4675ed4c7adac695aa639b01ac49e9d694cc20ec366efecc338cc62a40fa8215b2a42092
SSDEEP

3072:l7IhEow6LKcE1jtS0GuUJSmSNmQg0JVXhmVqiVdD6d3uCbK5jGVI4:lU1xejciJKVqq6wIKwO4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69abb3d122882046ad213f62e4502f6d2d126586cb54f764511df5ae130f5751

Files

69abb3d122882046ad213f62e4502f6d2d126586cb54f764511df5ae130f5751
.exe windows:6 windows x64

12835eba5a36499d26461d21ba2e4936

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxW

kernel32

RaiseException
CreateFileW
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetLastError
GetModuleFileNameW
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx

advapi32

SystemFunction036

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12835eba5a36499d26461d21ba2e4936

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 2KB - Virtual size: 7KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 144KB - Virtual size: 144KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 2KB - Virtual size: 7KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 144KB - Virtual size: 144KB