2067a660a1e95b7b7ecd163f38e14d96

Sharing

Copy URL Twitter E-mail

General

Target

2067a660a1e95b7b7ecd163f38e14d96
Size

274KB
MD5

2067a660a1e95b7b7ecd163f38e14d96
SHA1

ae690716bb1ead92f58be82eee1333878001dd47
SHA256

2017bbf896f1faad3379de2e64ae3539c392fd118c9dccd63b0016a4e3b54729
SHA512

898bb6307a075b5126d6e722e507da794b0b4cebeefc04869c06763f520ff9e2c155e860401c8c8aafd53ff9707d358dd6cce594e60d65132ba6fa20edebf6e2
SSDEEP

6144:ZZa/bpHytx2/fRIQSBioloTBGz9WVIyDI7eqawYDyskCHFx/kRIsg23j:Zq9BoloTiIo7KDysbHFx/k/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2067a660a1e95b7b7ecd163f38e14d96

Files

2067a660a1e95b7b7ecd163f38e14d96
.exe windows:6 windows x64 arch:x64

f7e6e824ad02dee377d0e05010ee804f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc

api-ms-win-crt-private-l1-1-0

__C_specific_handler
memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
__p__acmdln
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_atexit
_getpid
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite

api-ms-win-crt-string-l1-1-0

memset
strlen
strncmp

kernel32

CloseHandle
CreateFileW
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleFileNameW
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
QueueUserAPC
ResumeThread
SetFileInformationByHandle
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualAllocEx
VirtualProtect
VirtualQuery
WriteProcessMemory

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

api-ms-win-crt-locale-l1-1-0

__initialize_lconv_for_unsigned_char

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7e6e824ad02dee377d0e05010ee804f

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 261KB - Virtual size: 261KB

.data Size: 512B - Virtual size: 452B

.pdata Size: 512B - Virtual size: 396B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 132B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 261KB - Virtual size: 261KB

.data
Size: 512B - Virtual size: 452B

.pdata
Size: 512B - Virtual size: 396B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 132B