5d9895eb83885e13eef0a4d4366748b6

Sharing

Copy URL Twitter E-mail

General

Target

5d9895eb83885e13eef0a4d4366748b6
Size

158KB
MD5

5d9895eb83885e13eef0a4d4366748b6
SHA1

32deafb50c21d9bcbc1ead6fa8c64c5428dea61b
SHA256

3bb4672ea8600577aae9af018aa67a1c9231ff3280c71e06e1cedf91996dd4ba
SHA512

7aad7472a51882eeb207e64ef29c0e28147631dd7dcf748b00ed7bf3d1c712d50d8c063a5374d83dcadfc09b1cc324521a23ca2c8b184e11a25f30e5200b8fd3
SSDEEP

3072:CYfo8Kc7y3EiHBs2o23+SP2Ly5u4zl8WppnYSodUKWq5kFDjctg:N7JiH22otSoWHlTYSodBWykqt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d9895eb83885e13eef0a4d4366748b6

Files

5d9895eb83885e13eef0a4d4366748b6
.exe windows:5 windows x86 arch:x86

ce857c304081704e778d3914e13af03d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
WaitForSingleObject
FreeEnvironmentStringsA
QueryPerformanceCounter
GetModuleFileNameA
GetThreadLocale
FreeLibrary
GetProcessHeap
OpenEventW
OutputDebugStringW
LoadLibraryA
FindFirstFileW
TlsAlloc
EnterCriticalSection
LCMapStringA
GetSystemDirectoryW
FindResourceA
lstrcmpW
SetThreadPriority
HeapSize
InitializeCriticalSection
GetModuleHandleA
CloseHandle
FileTimeToSystemTime
FreeEnvironmentStringsW
GetFileTime
LeaveCriticalSection
WritePrivateProfileStringA
RaiseException
LoadLibraryExW
DebugBreak
LockResource
VirtualAlloc
GlobalHandle
MulDiv
IsValidLocale
GetACP
CreateEventW
ExitProcess
GlobalUnlock
RtlUnwind

msvcrt

__getmainargs
atoi
_iob
wcsrchr
__set_app_type
memcpy
_fileno
__dllonexit
?terminate@@YAXXZ
__p__commode
wcstoul
exit
_initterm
?what@exception@@UBEPBDXZ

user32

LoadStringA
GetNextDlgTabItem
IsIconic
SetPropA
LoadBitmapW
DrawIcon
EnableWindow
GetCursorPos
MessageBeep
GetWindowTextA
TranslateMessage
EnableMenuItem
DefWindowProcW
wsprintfA
RegisterClassW
IsWindow
LoadIconA
DestroyWindow
UnregisterClassW
GetScrollPos
EndPaint
SetCapture
GetMenuItemID
GetMessageW
CreatePopupMenu

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce857c304081704e778d3914e13af03d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 11KB - Virtual size: 199KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 11KB - Virtual size: 199KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1024B - Virtual size: 1024B