df7cdfd22429f67c5b253a981aa3571c15078814b38839784ffd45f2096c5edf

Sharing

Copy URL Twitter E-mail

General

Target

df7cdfd22429f67c5b253a981aa3571c15078814b38839784ffd45f2096c5edf
Size

1.4MB
MD5

55a7421474f8deb87e964bc49a66068f
SHA1

61cfa93895ade2f1d74f42a48519318ba9d7ece5
SHA256

df7cdfd22429f67c5b253a981aa3571c15078814b38839784ffd45f2096c5edf
SHA512

6ff3b0041703d37a2da3ccc73647dd1c07f4b28086f223417e904a888197e4bfe437b6fb348c28d7b2a08a78a1e571b960964d13224fbddd0eb6830509d4fc4e
SSDEEP

24576:B0aV4H3xzQRo8APUP/ODleJh+k3itCOhCBkVfXRs:+pHqPGen+kydS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df7cdfd22429f67c5b253a981aa3571c15078814b38839784ffd45f2096c5edf

Files

df7cdfd22429f67c5b253a981aa3571c15078814b38839784ffd45f2096c5edf
.exe windows:6 windows x64

21ca9f8ce331810285cb269168e8b9de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_aligned_free
_aligned_malloc
_amsg_exit
_assert
_beginthreadex
_cexit
_commode
_errno
_filelengthi64
_fileno
_fmode
_initterm
_isctype_l
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_lock
_mbtowc_l
_onexit
_pctype
_sscanf_l
_strcoll_l
_strdup
_strtod_l
_strtoi64
_strtoi64_l
_strtoui64
_strtoui64_l
_strxfrm_l
_sys_nerr
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_unlock
_vscprintf
_vsnprintf
_wcscoll_l
_wcsxfrm_l
_wfopen
abort
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputwc
fread
free
fseek
fsetpos
ftell
fwprintf
fwrite
getc
getenv
isspace
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
rewind
setlocale
signal
strcmp
strerror
strftime
strlen
strncmp
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcrtomb_s
wcslen
wcstol
wcstoul

kernel32

AcquireSRWLockExclusive
CloseHandle
DeleteCriticalSection
EnterCriticalSection
FlsAlloc
FlsGetValue
FlsSetValue
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadId
InitOnceExecuteOnce
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToThread
TlsGetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte

Sections

.text
Size: 546KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/18
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/30
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/42
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/53
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21ca9f8ce331810285cb269168e8b9de

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 546KB - Virtual size: 545KB

.rdata Size: 137KB - Virtual size: 137KB

.buildid Size: 512B - Virtual size: 53B

.data Size: 1KB - Virtual size: 8KB

.pdata Size: 19KB - Virtual size: 19KB

.00cfg Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 6KB - Virtual size: 6KB

/4 Size: 19KB - Virtual size: 19KB

/18 Size: 84KB - Virtual size: 83KB

/30 Size: 62KB - Virtual size: 62KB

/42 Size: 136KB - Virtual size: 135KB

/53 Size: 11KB - Virtual size: 11KB

/67 Size: 45KB - Virtual size: 44KB

.rsrc Size: 26KB - Virtual size: 25KB

.text
Size: 546KB - Virtual size: 545KB

.rdata
Size: 137KB - Virtual size: 137KB

.buildid
Size: 512B - Virtual size: 53B

.data
Size: 1KB - Virtual size: 8KB

.pdata
Size: 19KB - Virtual size: 19KB

.00cfg
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 6KB - Virtual size: 6KB

/4
Size: 19KB - Virtual size: 19KB

/18
Size: 84KB - Virtual size: 83KB

/30
Size: 62KB - Virtual size: 62KB

/42
Size: 136KB - Virtual size: 135KB

/53
Size: 11KB - Virtual size: 11KB

/67
Size: 45KB - Virtual size: 44KB

.rsrc
Size: 26KB - Virtual size: 25KB