fe71eaa1540dde4dd0f6661d76850a7e

Sharing

Copy URL Twitter E-mail

General

Target

fe71eaa1540dde4dd0f6661d76850a7e
Size

112KB
MD5

fe71eaa1540dde4dd0f6661d76850a7e
SHA1

205882bb2f5481ecd2fe733401129ae42f008ae5
SHA256

5939442d243848c6b62fa71ab00c31ade0b3ccfa492ac314198ed6b2732fae3a
SHA512

252aa07e2e23ab99b92685bd768ca7a7c6f19a331dece0cf1202e9b7011590a9b1a18bf2228dd35feade6a716a57d7af4c071f8d5604f5e3c858686e420ab1b0
SSDEEP

1536:yMg97otv4lQg8HN/9SGJ4WMoLeuUi2cF4DfQKRx50KVT4iKEFXvxKqHs:S2tv7twGYoLZFMfQeN/Xey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe71eaa1540dde4dd0f6661d76850a7e

Files

fe71eaa1540dde4dd0f6661d76850a7e
.exe windows:4 windows x86 arch:x86

5661a6e072e20ad54ca32463fd3e90d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingA
CloseHandle
GetFileSize
CreateFileA
SetFileAttributesW
MultiByteToWideChar
lstrlenA
CopyFileA
DeleteFileA
GetFileTime
FindNextFileA
SetFileAttributesA
lstrcpynA
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
ReleaseMutex
WaitForSingleObject
lstrcmpiA
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
ReadFile
SetFilePointer
CreateDirectoryA
GetCurrentProcess
FindClose
GetLastError
ExitProcess
SetErrorMode
SetCurrentDirectoryA
GetWindowsDirectoryA
SetFileTime
SystemTimeToFileTime
CreateProcessA
GetSystemDirectoryA
CreateThread
CreateMutexA
CreateSemaphoreA
Sleep
VirtualFree
VirtualAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GetDriveTypeA
GetLogicalDriveStringsA
ReleaseSemaphore
OpenSemaphoreA
GetComputerNameA
GetShortPathNameA
CompareStringW
SetEnvironmentVariableA
CompareStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetSystemTime
WinExec
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
HeapAlloc
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
TerminateProcess
WideCharToMultiByte
LCMapStringA

user32

PostQuitMessage
wsprintfA
ShowWindow
DialogBoxParamA
EndDialog

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize

shlwapi

PathQuoteSpacesA

ws2_32

WSACleanup
inet_addr
gethostbyname
WSAStartup

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yijlxru
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5661a6e072e20ad54ca32463fd3e90d0

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

shlwapi

ws2_32

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 56KB - Virtual size: 84KB

yijlxru Size: - Virtual size: 24KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 56KB - Virtual size: 84KB

yijlxru
Size: - Virtual size: 24KB