989fb5527589f03877b0fb0766650db8fa9f4456b4eb7244611b68e48344b712

Sharing

Copy URL Twitter E-mail

General

Target

989fb5527589f03877b0fb0766650db8fa9f4456b4eb7244611b68e48344b712
Size

153KB
MD5

d0112a9e0e9c338d82757f10e3cb6e45
SHA1

7734768d3dcae977fec0217452562989dc49d5dc
SHA256

989fb5527589f03877b0fb0766650db8fa9f4456b4eb7244611b68e48344b712
SHA512

1bcf0894f4de4d7a6dd0d8c95c5129efea1802594d924d2261279711cee125ac3062a961ed91b7a7f82039011805b6f21408b9ac1ea33001bf0ec0b76dc4a36a
SSDEEP

768:AcKytXi6W4k+hRe9gokkuEeOooPXEeOooPZ:A+W4kiRwLE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
989fb5527589f03877b0fb0766650db8fa9f4456b4eb7244611b68e48344b712

Files

989fb5527589f03877b0fb0766650db8fa9f4456b4eb7244611b68e48344b712
.exe windows:5 windows x86 arch:x86

73c5673e870416a4b81f48ba08956954

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetLastError
DeleteCriticalSection
CreateProcessW
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z

vcruntime140

__std_exception_destroy
memmove
memset
__CxxFrameHandler3
_except_handler4_common
__std_exception_copy
_CxxThrowException
wcsrchr
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__p__commode
_set_fmode

api-ms-win-crt-string-l1-1-0

wcscat_s
wcscpy_s

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_seh_filter_exe
_c_exit
_initialize_wide_environment
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
terminate
_controlfp_s
_initialize_onexit_table
_crt_atexit
_cexit
_set_app_type
_register_thread_local_exe_atexit_callback
_register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73c5673e870416a4b81f48ba08956954

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

ole32

oleaut32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 80B

.rsrc Size: 137KB - Virtual size: 137KB

.reloc Size: 1024B - Virtual size: 764B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 80B

.rsrc
Size: 137KB - Virtual size: 137KB

.reloc
Size: 1024B - Virtual size: 764B