7ccdaf96126ad2b3f28760cc5761b40935bf15cbad310f2b23537681639aac36

Sharing

Copy URL Twitter E-mail

General

Target

7ccdaf96126ad2b3f28760cc5761b40935bf15cbad310f2b23537681639aac36
Size

365KB
MD5

a25285ce6839fbeaf0e08ecccf964632
SHA1

84464861a8f92187d2905ff9f455d87657f68e0e
SHA256

7ccdaf96126ad2b3f28760cc5761b40935bf15cbad310f2b23537681639aac36
SHA512

ef3285bf172628d3f86616f52b85b032312636a8ab8ef639f51e68c69146bd10d472e339c9ed361dec8c2c902c1aea915b53af9ddd17d52151bac8eac109b028
SSDEEP

6144:bJgAXzDKUhwnR2Fb7ulsVpey1dgH4Q9+x83o/U:9PKYXFayr1Mo/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ccdaf96126ad2b3f28760cc5761b40935bf15cbad310f2b23537681639aac36

Files

7ccdaf96126ad2b3f28760cc5761b40935bf15cbad310f2b23537681639aac36
.exe windows:5 windows x86

354f143e19cb7fd7d38daa9493275fe2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
TryEnterCriticalSection
AllocConsole
WriteTapemark
EndUpdateResourceW
ReadConsoleA
InterlockedDecrement
WaitNamedPipeA
GetCurrentProcess
ZombifyActCtx
SetEvent
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
WriteFile
FindResourceExA
GetConsoleCP
GlobalAlloc
FreeConsole
GetFileAttributesA
VerifyVersionInfoA
lstrlenW
GetProcAddress
AttachConsole
LocalLock
HeapUnlock
ReadFileEx
LoadLibraryA
SetConsoleCtrlHandler
GetModuleFileNameA
SetConsoleTitleW
GetModuleHandleA
GetConsoleTitleW
SetFileShortNameA
GetCurrentProcessId
GetPrivateProfileSectionW
FindActCtxSectionStringW
WriteProcessMemory
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetLastError
HeapFree
ExitProcess
GetStdHandle
TerminateProcess
IsDebuggerPresent
HeapAlloc
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

winhttp

WinHttpCloseHandle

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 73.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

354f143e19cb7fd7d38daa9493275fe2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winhttp

Sections

.text Size: 97KB - Virtual size: 97KB

.data Size: 206KB - Virtual size: 73.7MB

.rsrc Size: 61KB - Virtual size: 60KB

.text
Size: 97KB - Virtual size: 97KB

.data
Size: 206KB - Virtual size: 73.7MB

.rsrc
Size: 61KB - Virtual size: 60KB