0ee193c3f8f872bd8977991141ed7e16

Resubmissions

19-12-2023 15:20

231219-sq44pscgdp 10

19-12-2023 10:59

231219-m3wefagghj 10

Sharing

Copy URL

Twitter E-mail

General

Target

0ee193c3f8f872bd8977991141ed7e16
Size

255KB
MD5

0ee193c3f8f872bd8977991141ed7e16
SHA1

e6aae720bc9c024b9a202cd547f162a25224297f
SHA256

e27d46e3fe68a2bca07d513a138d4f8fb15e77696e709acb6ab907e54ef7867c
SHA512

ae0fa79fcce8234769341e2d7311c5a0e5a53853e61d53a73f7b961cfe2a7499c724692e60f24b041558080eef2413f610b5d38222a42a188d95600f831c8a04
SSDEEP

3072:mAFNeuTg3+LkRuUsAd6v7eFopFNnkxcZcOUmoz93z8aKDe8hNau7XcgSZ0:FNxTLLLhAd6UopFAuKD1ue8hNauXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ee193c3f8f872bd8977991141ed7e16

Files

0ee193c3f8f872bd8977991141ed7e16
.exe windows:4 windows x86 arch:x86

09c3b6c93078d2fd3a1d39f61afc1e9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
abort
vfprintf

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

09c3b6c93078d2fd3a1d39f61afc1e9e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 88KB - Virtual size: 88KB

.rdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 1008B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 154KB - Virtual size: 154KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 88KB - Virtual size: 88KB

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 1008B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 154KB - Virtual size: 154KB