7672188d667062c577b20cd8912f3871

Sharing

Copy URL Twitter E-mail

General

Target

7672188d667062c577b20cd8912f3871
Size

1.1MB
MD5

7672188d667062c577b20cd8912f3871
SHA1

5f2a849bb71b87cf2980c307a8904fc1a523be61
SHA256

1264b40feaa824d5ba31cef3c8a4ede230c61ef71c8a7994875deefe32bd8b3d
SHA512

3aa3a510ae5095def909a9df75c261567e8e894d264f96a38edf2a4a0636ce62bc39eae05c748897b1b306b4efdbfaae4d4d079767e96c6b251002fc9e9d09b2
SSDEEP

24576:3jRLcVHaxGHGpuYsPnewAbZPSSmRdcgJnZjAuJ0YeX3plWjMSY7T9KST:zNc8xGmpfoewAbZPRmRdXJnZjAuJ0YA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7672188d667062c577b20cd8912f3871

Files

7672188d667062c577b20cd8912f3871
.exe windows:5 windows x86 arch:x86

e51a49fa7ab7382fa687713d13c26758

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetConsoleMode
GetLastError
CreateFileA
DeleteFileA
CloseHandle
SetFilePointerEx
GetFileSize
ExitProcess
GetConsoleWindow
ExitThread
GetComputerNameA
LoadLibraryW
ReleaseMutex
CreateMutexA
FindClose
ExpandEnvironmentStringsA
GetDriveTypeA
TerminateProcess
SetConsoleMode
WriteFile
GetCurrentProcess
FindNextFileW
GetFileSizeEx
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
FindFirstFileW
GetLogicalDrives
lstrcmpW
ReadFile
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
TryEnterCriticalSection
DuplicateHandle
GetCurrentThread
GetExitCodeThread
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
EncodePointer
DecodePointer
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
FreeLibrary
LoadLibraryExW
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
GetCommandLineA
GetCommandLineW
GetACP
CreateThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleCP
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
MoveFileExW
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetProcessHeap
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetTimeZoneInformation
CreateFileW
ReadConsoleW
SetEndOfFile
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority

user32

ShowWindow

advapi32

CryptCreateHash
RegEnumKeyExA
RegOpenKeyExW
CryptDestroyKey
CryptAcquireContextW
CryptEncrypt
CryptReleaseContext
CryptDeriveKey
CryptHashData
CryptDestroyHash

wininet

HttpOpenRequestW
InternetOpenW
HttpSendRequestW
HttpAddRequestHeadersW
InternetConnectW
InternetCloseHandle

crypt32

CryptStringToBinaryA
CryptDecodeObjectEx
CryptImportPublicKeyInfo

ws2_32

gethostbyname
WSAStartup
inet_ntoa
gethostname
WSACleanup

Sections

.text
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e51a49fa7ab7382fa687713d13c26758

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

wininet

crypt32

ws2_32

Sections

.text Size: 808KB - Virtual size: 808KB

.rdata Size: 221KB - Virtual size: 220KB

.data Size: 11KB - Virtual size: 17KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 5KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 808KB - Virtual size: 808KB

.rdata
Size: 221KB - Virtual size: 220KB

.data
Size: 11KB - Virtual size: 17KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 36KB - Virtual size: 36KB