1692f3a147ee02867097cdb9b5c0c7e4

Sharing

Copy URL Twitter E-mail

General

Target

1692f3a147ee02867097cdb9b5c0c7e4
Size

10.7MB
MD5

1692f3a147ee02867097cdb9b5c0c7e4
SHA1

9c9fa09e5bd3d412c99d974676961026b371104c
SHA256

a59aed658d57b19984d33beeae9e795916ac90158d2cbe1a4a2ea947113cf24d
SHA512

02855f145a1b4f88be443e23e0fc766ee90cf91272fa3a8bb258b86c74351a2cee58dd0454d3a57452c3972b2270521075f4d97eb3adb6acab7c19093ef47b4c
SSDEEP

49152:KWqmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmu:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1692f3a147ee02867097cdb9b5c0c7e4

Files

1692f3a147ee02867097cdb9b5c0c7e4
.exe windows:5 windows x86 arch:x86

3e5e22afadcf458c018dd0ba7481a647

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleExA
SetEndOfFile
HeapAlloc
InterlockedIncrement
CreateJobObjectW
SetConsoleScreenBufferSize
UnlockFile
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesA
GetCompressedFileSizeW
ReadConsoleOutputA
AddRefActCtx
GetLocaleInfoW
SizeofResource
GetFileAttributesA
GetTimeFormatW
GetAtomNameW
lstrcatA
FindNextVolumeMountPointW
CreateDirectoryA
ChangeTimerQueueTimer
GetProcAddress
HeapSize
FreeUserPhysicalPages
PrepareTape
GetModuleHandleA
SetFileAttributesW
LCMapStringW
CloseHandle
CreateFileW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
RaiseException
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetLastError
HeapCreate
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
HeapQueryInformation
HeapFree
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers

Exports

Exports

Memories
Roses
Sos
Surrender

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yosu
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10.5MB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e5e22afadcf458c018dd0ba7481a647

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 11KB - Virtual size: 4.0MB

.yosu Size: 1KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 10.5MB - Virtual size: 22KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 11KB - Virtual size: 4.0MB

.yosu
Size: 1KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 10.5MB - Virtual size: 22KB