f8c411c83737e0c716835253c2641aa34d655c8bb0bc1fa071785616e9f3b2f2

Sharing

Copy URL Twitter E-mail

General

Target

f8c411c83737e0c716835253c2641aa34d655c8bb0bc1fa071785616e9f3b2f2
Size

211KB
MD5

370f1313607e70406e471126b8b5f98f
SHA1

290b2fda0c8c3afa4195c2ff7c783e64a59c7ac1
SHA256

f8c411c83737e0c716835253c2641aa34d655c8bb0bc1fa071785616e9f3b2f2
SHA512

d30ef516255b5617d2c367bea394aac7a3de7d1e4a45dc0c8fb41fe954d2559843fc2926ec33f0aab12c298487a8eaf2a98b8358cf70a39b846feb56e120c733
SSDEEP

1536:1/Oq2/B6FC+M/erQ1eoFkaarZyd1oJ9pRO4Yovqox9yqLYQflERcPT9+:1/Q/BAaTdkxcdIpRO4YovvO/sscR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8c411c83737e0c716835253c2641aa34d655c8bb0bc1fa071785616e9f3b2f2

Files

f8c411c83737e0c716835253c2641aa34d655c8bb0bc1fa071785616e9f3b2f2
.exe windows:5 windows x86 arch:x86

fb0ac771f34baac12447c2cc433a9186

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
VirtualAlloc
FreeConsole
SetStdHandle
WriteConsoleW
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetLastError
HeapFree
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
HeapSize
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileW

wininet

InternetOpenUrlW
InternetCloseHandle
InternetReadFile
InternetOpenW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb0ac771f34baac12447c2cc433a9186

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 112KB - Virtual size: 111KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 112KB - Virtual size: 111KB

.reloc
Size: 7KB - Virtual size: 6KB