760a474cc0fc4df6a994e314067520a6

Sharing

Copy URL Twitter E-mail

General

Target

760a474cc0fc4df6a994e314067520a6
Size

4.0MB
MD5

760a474cc0fc4df6a994e314067520a6
SHA1

95f73a75541231fc40b4eacfbc7ab0ca015acbf8
SHA256

09b06abb5f50978438f832f2fb2755c10838ff12810e3b1bdf487db9e0ceada0
SHA512

0050e90d818ad6894395edb605158d37c8682b6dc52dc9e3fa07f9512ceb190d8f0f27336e3940827718454265173b90ec4f5ed4e7183477238a458392b83b43
SSDEEP

98304:fauoGDGuGki4NjAvEyiMUcC3H3hMtHApBTf:wGLGntT8H9BTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
760a474cc0fc4df6a994e314067520a6

Files

760a474cc0fc4df6a994e314067520a6
.exe windows:5 windows x86 arch:x86

af18d228f8321bee6e83581db41d4dce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
GetFileAttributesW
GetModuleFileNameW
GetTempPathW
ExitProcess
CreateThread
SetEndOfFile
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
SetHandleCount
GetStdHandle
GetFileType
IsProcessorFeaturePresent
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CloseHandle
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
CreateFileW
LoadLibraryW
CompareStringW
GetProcessHeap

user32

GetMessageW
wsprintfW

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af18d228f8321bee6e83581db41d4dce

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 175KB - Virtual size: 174KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 175KB - Virtual size: 174KB

.reloc
Size: 7KB - Virtual size: 7KB