fb5b6b45d0cea46ae0d474dc339caf149192661f7c30a92fa8c8b6f0c58f7ff1

Sharing

Copy URL

Twitter E-mail

General

Target

fb5b6b45d0cea46ae0d474dc339caf149192661f7c30a92fa8c8b6f0c58f7ff1
Size

215KB
MD5

70602932062ef4df962bdfcd0cba6c7b
SHA1

9a89066928bdeec725a15a76b3876690c51ef5ec
SHA256

fb5b6b45d0cea46ae0d474dc339caf149192661f7c30a92fa8c8b6f0c58f7ff1
SHA512

e567f140ee8fa4f94e09b3d5f031cf785e2dc5b6f27f8dd9fb1058ea7773171f45c136b50a4f884ad9adf990b607ef713fd8965b3f0a54a343830b3f8f65a03e
SSDEEP

3072:q46/nP5lBO846S0Wo/E5gTQXdZi8m9+iVtrofsjcGBCLmczWbMa2GnEtQeAg0Fup:vGKd48m9rVtrofz9L9ybmAOiNmGTS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb5b6b45d0cea46ae0d474dc339caf149192661f7c30a92fa8c8b6f0c58f7ff1

Files

fb5b6b45d0cea46ae0d474dc339caf149192661f7c30a92fa8c8b6f0c58f7ff1
.exe windows:6 windows x86

a15fa42cac9ea35bee20006a052de11d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
Sleep
GetLastError
LockResource
HeapReAlloc
CloseHandle
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
DeleteFileW
GetLongPathNameW
GetCurrentProcess
TerminateProcess
K32GetModuleFileNameExW
InitializeCriticalSectionEx
OpenProcess
LoadLibraryW
K32EnumProcesses
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetExitCodeProcess
GetModuleFileNameW
WideCharToMultiByte
WritePrivateProfileStringW
RemoveDirectoryW
GetTempPathW
GetFileAttributesW
SetFileAttributesW
GetWindowsDirectoryW
MoveFileExW
CopyFileW
MoveFileW
WriteConsoleW
CreateFileW
SetStdHandle
CreateMutexW
HeapFree
WaitForSingleObject
SizeofResource
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlUnwind
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetACP
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
SetFilePointerEx
SetEndOfFile

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

shell32

ord165
SHFileOperationW
SHGetSpecialFolderPathW
ShellExecuteExW

ole32

CoCreateGuid

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a15fa42cac9ea35bee20006a052de11d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 136KB - Virtual size: 135KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 136KB - Virtual size: 135KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB