87cca06b610d8be1b1e7cf2a2513eff236ad09ff6db95520b362d033e87ac7ee

Sharing

Copy URL Twitter E-mail

General

Target

87cca06b610d8be1b1e7cf2a2513eff236ad09ff6db95520b362d033e87ac7ee
Size

94KB
MD5

3881279cc229ee7b47bd82c178daebf6
SHA1

8b538896b8988c8f7bd73132ad70d61d90e7a309
SHA256

87cca06b610d8be1b1e7cf2a2513eff236ad09ff6db95520b362d033e87ac7ee
SHA512

f6b14b53dfd8267fd531656a8e02e3b03049715a8287767c749bb1b6492a119476dc06d3e985edcf778059bb7d61a8f0fea3746896ef16d1e11b182619a35e0d
SSDEEP

1536:NVniyHkDjy5m48R6JQqTlgC83Ivkl9W0qzj278o/m6AMsZanGGA:rdHkDj2mYbTaCOZWQ7FzAM6an8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87cca06b610d8be1b1e7cf2a2513eff236ad09ff6db95520b362d033e87ac7ee

Files

87cca06b610d8be1b1e7cf2a2513eff236ad09ff6db95520b362d033e87ac7ee
.exe windows:5 windows x64 arch:x64

76a28e0acc29f056441aa950b8ee904c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameW
LeaveCriticalSection
GetLocalTime
InitializeCriticalSection
OutputDebugStringW
LocalAlloc
EnterCriticalSection
GetCurrentProcess
EncodePointer
DecodePointer
GetCommandLineW
RaiseException
RtlPcToFileHeader
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
GetLastError
FlsAlloc
HeapAlloc
HeapFree
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
LoadLibraryW
SetFilePointer
CreateFileW
WriteConsoleW
SetStdHandle
FlushFileBuffers
SetEndOfFile
GetProcessHeap
ReadFile

advapi32

SetEntriesInAclW
AllocateAndInitializeSid
GetSecurityInfo
SetNamedSecurityInfoW
CreateWellKnownSid

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76a28e0acc29f056441aa950b8ee904c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 14KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 448B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 14KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 448B

.reloc
Size: 1KB - Virtual size: 1KB