370ae26ca372ba726bf7162c215df8a0803c59a124d2ec23e9e219561ef38ef3

Sharing

Copy URL Twitter E-mail

General

Target

370ae26ca372ba726bf7162c215df8a0803c59a124d2ec23e9e219561ef38ef3
Size

14.1MB
MD5

e0c4694ec9bbd0a458c69e004121ad77
SHA1

e6e5867b32ebd9483e0c45705255d9ac755ff51c
SHA256

370ae26ca372ba726bf7162c215df8a0803c59a124d2ec23e9e219561ef38ef3
SHA512

5e923a0ad9ea7a8b1afb5b8cae402651eaf60e683c41f6a7f512e0504160c85721ad503fe455136ceec4a221ac913785c5b39bd57d30d6317204816854c0469e
SSDEEP

393216:vJgggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggf:xggggggggggggggggggggggggggggggw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
370ae26ca372ba726bf7162c215df8a0803c59a124d2ec23e9e219561ef38ef3

Files

370ae26ca372ba726bf7162c215df8a0803c59a124d2ec23e9e219561ef38ef3
.exe windows:5 windows x86

145a5d11374a22ff93c2e92b9557decf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
SetThreadContext
GetNumberOfConsoleInputEvents
FindResourceExW
BuildCommDCBAndTimeoutsA
SetConsoleActiveScreenBuffer
WaitForSingleObject
GlobalAlloc
GetPrivateProfileIntA
AddRefActCtx
GetConsoleMode
SizeofResource
WritePrivateProfileStructW
CreateSemaphoreA
SetSystemPowerState
lstrcatA
GetBinaryTypeW
ExitThread
lstrlenW
DeactivateActCtx
GetNamedPipeHandleStateW
GetLargestConsoleWindowSize
VerifyVersionInfoW
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
AddAtomW
SetCurrentDirectoryW
GetProfileStringA
SetFileApisToANSI
GetPrivateProfileStructA
SetSystemTime
CompareStringA
_lopen
CloseHandle
DebugBreak
FindActCtxSectionStringW
GetSystemTime
lstrcpyW
GetStartupInfoW
RaiseException
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

GetListBoxInfo

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 43.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14.0MB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

145a5d11374a22ff93c2e92b9557decf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 95KB - Virtual size: 95KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 43.5MB

.rsrc Size: 14.0MB - Virtual size: 9KB

.text
Size: 95KB - Virtual size: 95KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 43.5MB

.rsrc
Size: 14.0MB - Virtual size: 9KB