336aa43a177cfec3ec5e6da3635cb70c

Sharing

Copy URL

Twitter E-mail

General

Target

336aa43a177cfec3ec5e6da3635cb70c
Size

262KB
MD5

336aa43a177cfec3ec5e6da3635cb70c
SHA1

e2b23b421a960c34694ada65df834ea750479052
SHA256

e2c5a365a311f68a71e3c85f062826f9e92251d2e3b8d397974efd47e72e186a
SHA512

4fa7abbf698b6afc28278f33b178b7b01f010804be8f80f4d523aaf2c021ea2fb11dbdb6ea2371e0f031b120a9beae28fa0cf8ae0a6466db9a326db65855fe80
SSDEEP

6144:sPKhYpiOMT+dOHs61RVnAADkgEIuRAUu6:sPKhYjA+dOHdJAiXfg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
336aa43a177cfec3ec5e6da3635cb70c

Files

336aa43a177cfec3ec5e6da3635cb70c
.exe windows:5 windows x86 arch:x86

ae10d0952f1c826f6e3d1ede875ec824

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
SearchPathA
ExitProcess
GetModuleHandleA
LoadLibraryA
lstrcmpA
lstrlenA
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
DeleteCriticalSection
GetProcAddress
LoadLibraryW
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
MultiByteToWideChar
ReadFile
SetHandleCount
GetFileType
SetFilePointer
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

comsvcs

SafeRef
CoEnterServiceDomain
RecycleSurrogate

crypt32

CryptGetMessageCertificates
CertEnumCRLContextProperties
CryptCloseAsyncHandle
CertAddEncodedCertificateToStore
CryptMsgEncodeAndSignCTL
CryptInstallOIDFunctionAddress
CertSetCertificateContextPropertiesFromCTLEntry
CryptMsgOpenToDecode
CryptHashMessage
CryptImportPublicKeyInfoEx
CertEnumCertificateContextProperties
CertComparePublicKeyInfo
CryptMsgVerifyCountersignatureEncoded
CertCloseStore
CryptMsgVerifyCountersignatureEncodedEx
CryptFreeOIDFunctionAddress
CertDeleteCertificateFromStore
CertSerializeCTLStoreElement
CryptInitOIDFunctionSet
CertEnumSystemStoreLocation
CertDuplicateCertificateContext
CryptFormatObject
CertGetCertificateChain
CertNameToStrA
CertCompareCertificate
CertIsValidCRLForCertificate
CryptMsgGetParam
CertOpenSystemStoreA
CryptSignAndEncryptMessage
CryptMemFree
CryptVerifyMessageSignatureWithKey
CertVerifyValidityNesting
CertFreeCertificateChain
CertGetValidUsages
CertSaveStore
CertDeleteCRLFromStore
CryptUnregisterDefaultOIDFunction
CryptEnumOIDInfo
CertNameToStrW
CryptFindOIDInfo
CertFindCertificateInStore
CryptGetAsyncParam
CertAddEncodedCTLToStore
CryptEnumOIDFunction
CertAddEncodedCertificateToSystemStoreA
CertGetCRLFromStore
CertGetNameStringW
CertAddCertificateContextToStore
CryptMsgControl
PFXVerifyPassword
CertVerifyCRLTimeValidity
CertSetStoreProperty
CryptGetMessageSignerCount
CryptStringToBinaryW
CertCreateCertificateContext
CertEnumCTLsInStore
CertCompareCertificateName
CertFindCTLInStore
CryptMsgClose
CryptGetDefaultOIDFunctionAddress
CryptProtectData
CertEnumCertificatesInStore
CryptSetOIDFunctionValue
CertFindRDNAttr
CryptHashToBeSigned
CryptMemAlloc
CryptBinaryToStringW
CryptMsgCountersign
CertSerializeCertificateStoreElement
CertResyncCertificateChainEngine
CryptGetKeyIdentifierProperty
CertDuplicateCertificateChain
CryptVerifyCertificateSignature
CertSetCTLContextProperty
PFXImportCertStore
CertFreeCertificateContext
CryptBinaryToStringA
CertStrToNameA
CertVerifyCTLUsage
CertRDNValueToStrW
CertFreeCertificateChainEngine
CryptCreateAsyncHandle
CryptSignMessageWithKey
CryptGetOIDFunctionValue
CertCreateContext

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae10d0952f1c826f6e3d1ede875ec824

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comsvcs

crypt32

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 191KB - Virtual size: 197KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 191KB - Virtual size: 197KB

.reloc
Size: 5KB - Virtual size: 4KB