276948c7e6f54d417d75147aaede17ca

Sharing

Copy URL Twitter E-mail

General

Target

276948c7e6f54d417d75147aaede17ca
Size

106KB
MD5

276948c7e6f54d417d75147aaede17ca
SHA1

855f1f5168f99f239c2035289f30b0ec41499aef
SHA256

bfdad372a4b3b7c91fdbc70c74da5e4297f6a9af535fbf7a61505d2e646df83d
SHA512

7c097b38b422304ce8cd6ed5947981ceab7f008a81b386fae63471469d85c6ad8ea70d6fbc3a4650dd3718ca32edaa9af0648de0a4c641a8b707666e28eaaf5d
SSDEEP

1536:DLq3xwAQKDcBtBYW4k1DZIm5ByFhcn29r3imbTU1QjpDY7qM54s:DKSUca+NIm5BFn213HbWQtDY7qMes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
276948c7e6f54d417d75147aaede17ca

Files

276948c7e6f54d417d75147aaede17ca
.exe windows:5 windows x86 arch:x86

fcb4fd42e750e4b86439c50049f6b2db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentProcess
OpenProcess
GetProcAddress
VirtualAlloc
LoadLibraryA
GetProcessId
GetModuleHandleA
DuplicateHandle
GetCurrentProcessId
GetLastError
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
InitializeCriticalSection

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unp
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcb4fd42e750e4b86439c50049f6b2db

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 13KB

.unp Size: 32KB - Virtual size: 32KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 13KB

.unp
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 3KB - Virtual size: 3KB