fcb6e43591c5a01568ca5a194598cfd0

Sharing

Copy URL

Twitter E-mail

General

Target

fcb6e43591c5a01568ca5a194598cfd0
Size

125KB
MD5

fcb6e43591c5a01568ca5a194598cfd0
SHA1

93ce7eda73a95352a91e7da5ba6b6e9c674c86a9
SHA256

7c5229a5b05aa260550b2df98b0e1aa6dfbb89b9f121ea2118cb673cc614e011
SHA512

b1f3f61059057378955271ea2ba4923a06e19e136cf93c9dc2babe8091e281c837d913d0a5b87a14f9a08708bbf49d2d892f263b93962ae4c172630641bbbf82
SSDEEP

3072:uhUl24g04jf+C8oerCkcl8W60Z/lthc2C3:yUl24jYf+EerCky83GltO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcb6e43591c5a01568ca5a194598cfd0

Files

fcb6e43591c5a01568ca5a194598cfd0
.exe windows:5 windows x86 arch:x86

51a4550c781ca5e685d9423a93e3ae90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ufat

?Initialize@FAT_DIRENT@@QAEEPAXE@Z
??1REAL_FAT_SA@@UAE@XZ
?Read@REAL_FAT_SA@@UAEEPAVMESSAGE@@@Z
?Initialize@FILEDIR@@QAEEPAVMEM@@PAVLOG_IO_DP_DRIVE@@PAVFAT_SA@@PBVFAT@@K@Z
??0EA_HEADER@@QAE@XZ
?FreeChain@FAT@@QAEXK@Z
??1EA_HEADER@@UAE@XZ
?QueryLengthOfChain@FAT@@QBEKKPAK@Z
?QueryLastAccessTime@FAT_DIRENT@@QBEEPAT_LARGE_INTEGER@@@Z
?QueryEaSetClusterNumber@EA_HEADER@@QBEGG@Z
?AllocChain@FAT@@QAEKKPAK@Z
?Set12@FAT@@AAEXKK@Z
??0ROOTDIR@@QAE@XZ
?Read@CLUSTER_CHAIN@@UAEEXZ
??0FAT_SA@@QAE@XZ
??0FAT_DIRENT@@QAE@XZ
?Initialize@EA_SET@@QAEEPAVMEM@@PAVLOG_IO_DP_DRIVE@@PAVFAT_SA@@PBVFAT@@KK@Z
?QueryNthCluster@FAT@@QBEKKK@Z
??0FILEDIR@@QAE@XZ
Format

msvcrt

tan
strtod
vswprintf
strchr
__CxxQueryExceptionSize
__iscsym
_mbctype
_putwch
__argc
_wctime
_CIsin
___setlc_active_func
_wcsrev
wcstok
__p__tzname
_getws
fwprintf
ctime

kernel32

VirtualFreeEx
WriteFile
EnumLanguageGroupLocalesW
SetTapeParameters
VirtualAlloc
SetVolumeLabelW
HeapCreate
AttachConsole
BaseCheckAppcompatCache
GetConsoleKeyboardLayoutNameW
SetThreadPriority
GetConsoleKeyboardLayoutNameA
ReleaseSemaphore
GetStartupInfoA
GlobalUnWire
WriteConsoleInputVDMW
GetNamedPipeHandleStateW
IsBadStringPtrA
SystemTimeToTzSpecificLocalTime
ExitProcess
LoadLibraryA
FreeEnvironmentStringsA
GetCurrentThread
OutputDebugStringA
LocalAlloc

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51a4550c781ca5e685d9423a93e3ae90

Headers

DLL Characteristics

File Characteristics

Imports

ufat

msvcrt

kernel32

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 156KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 276B

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 156KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 276B