78a542347d1a6b1c27149e75771d279ff30735835f18c0e56995ae093fc90ca5

Sharing

Copy URL

Twitter E-mail

General

Target

78a542347d1a6b1c27149e75771d279ff30735835f18c0e56995ae093fc90ca5
Size

326KB
MD5

3272b9c95a4d40c5a384d30ef709e76a
SHA1

6a3bad809e0dba22c47004c657fcee527408e924
SHA256

78a542347d1a6b1c27149e75771d279ff30735835f18c0e56995ae093fc90ca5
SHA512

b49d897f562930d6e58139e1f701cff4a8a349a8b4ec39f6fdf8425ef8fffedf290d3f5c76f388b19c8902d9ca6cd8bec0cb71edc479696bca8df751428821c4
SSDEEP

6144:3ewvvv5CWvvvURvXCQvkI8vHvfLvrnvvvvvvvvvvvvvvvvkvvvvvvvvvvv+vvvvX:ubGtUqmUTxMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a542347d1a6b1c27149e75771d279ff30735835f18c0e56995ae093fc90ca5

Files

78a542347d1a6b1c27149e75771d279ff30735835f18c0e56995ae093fc90ca5
.exe windows:6 windows x86

8eda3990a7477e8c37795144cf3f9212

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

terminate
_cexit
_crt_at_quick_exit
_invalid_parameter_noinfo_noreturn
abort
_crt_atexit
_execute_onexit_table
_seh_filter_dll
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_register_onexit_function

vcruntime140

_except_handler4_common
__current_exception_context
__FrameUnwindFilter
__current_exception
_CxxThrowException
__std_exception_destroy
memset
__std_exception_copy
memmove

kernel32

IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
WideCharToMultiByte
ReleaseSRWLockExclusive
TerminateProcess
GetCurrentProcess
WakeAllConditionVariable
AcquireSRWLockExclusive
SleepConditionVariableSRW
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Xlength_error@std@@YAXPBD@Z
?__ExceptionPtrDestroy@@YAXPAX@Z

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8eda3990a7477e8c37795144cf3f9212

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

vcruntime140

kernel32

msvcp140

mscoree

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 257KB - Virtual size: 257KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 257KB - Virtual size: 257KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 1KB - Virtual size: 1KB