cca0bf6f2d8e547b622e3a1fe5c492f2d63244e7558e7b382417cf6fd0e5645f

Sharing

Copy URL Twitter E-mail

General

Target

cca0bf6f2d8e547b622e3a1fe5c492f2d63244e7558e7b382417cf6fd0e5645f
Size

525KB
MD5

c2b5312d8179108d4d4d47189904d593
SHA1

293c7738eb16a4104563116c19bf9def40068ddf
SHA256

cca0bf6f2d8e547b622e3a1fe5c492f2d63244e7558e7b382417cf6fd0e5645f
SHA512

c17546b494c2c3b29841455002ad94ba4707cda3bae068747d7e61575e3c26b7e3d1acf2c9d19e15f75a7da26190e809cf084c44deb936750dba89ae80a403c0
SSDEEP

6144:UwzfKlMYUMxR8cLlwzWBFEQuXx7+yE42iP6ybs4RpjUa:UwzfKlMYUMhhrXduX9+yliGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cca0bf6f2d8e547b622e3a1fe5c492f2d63244e7558e7b382417cf6fd0e5645f

Files

cca0bf6f2d8e547b622e3a1fe5c492f2d63244e7558e7b382417cf6fd0e5645f
.exe windows:6 windows x64

bacc487ae512b74522dc19bd63efb2f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
GetProcAddress
GetFileAttributesA
LoadLibraryA
CreateDirectoryA
Sleep
WriteConsoleW
CreateFileW
ReadConsoleW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCurrentThread
GetFileType
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
MoveFileExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
RtlUnwind

user32

UnregisterClassA

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bacc487ae512b74522dc19bd63efb2f3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 408KB - Virtual size: 408KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 4KB - Virtual size: 10KB

.pdata Size: 23KB - Virtual size: 23KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 1024B - Virtual size: 656B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 408KB - Virtual size: 408KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 4KB - Virtual size: 10KB

.pdata
Size: 23KB - Virtual size: 23KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1024B - Virtual size: 656B

.reloc
Size: 2KB - Virtual size: 2KB