fe772393790d7cb1cc82b273c20884e3

Sharing

Copy URL Twitter E-mail

General

Target

fe772393790d7cb1cc82b273c20884e3
Size

161KB
MD5

fe772393790d7cb1cc82b273c20884e3
SHA1

a0800149d0357980d72a6efefe7eab3e4d0f44e3
SHA256

dea65580c5fe6d5f46facdb612e945145e56371e87cd436570fa59aad10b4b0a
SHA512

fb818e00ec57a7d92dbb88c610c17ed13e4c4d2717b3c82b20db59f394cabf8de7302af28c7a6e362a689b285d25714b7cf963e6c1e58c509f41feab82d9c60b
SSDEEP

3072:NrJG/BQGbfrUbxu2KUc68UzsQ8cNP70jECIi9eTvsG//QGbfrUbxu2K0:RJG/yxiUTxzsQ8cNP70ACncTEG/0xi0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe772393790d7cb1cc82b273c20884e3

Files

fe772393790d7cb1cc82b273c20884e3
.exe windows:6 windows x64 arch:x64

e17fc4b8de2c3c97a65817b488290eb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

vcruntime140

memset
memcpy
memcmp
memchr
__C_specific_handler
memmove
strrchr
strchr

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_cexit
terminate
_set_app_type
_initialize_onexit_table
_register_onexit_function
signal
_errno
_configure_narrow_argv
abort
_get_initial_narrow_environment
_initterm
exit
_initterm_e
_exit
_crt_atexit
__p___argc
strerror
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

fputc
fputs
_close
__p__commode
_set_fmode
__acrt_iob_func
__stdio_common_vfprintf
_write

api-ms-win-crt-convert-l1-1-0

strtol
atoi

api-ms-win-crt-string-l1-1-0

strncat
isdigit
islower
wcsncmp
strncmp
isalpha
_stricmp
tolower
iscntrl

api-ms-win-crt-heap-l1-1-0

malloc
realloc
_set_new_mode
free

api-ms-win-crt-environment-l1-1-0

__p__wenviron
__p__environ

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-math-l1-1-0

__setusermatherr
modf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

wsock32

ntohl
WSACleanup
WSAStartup

kernel32

FreeLibrary
LoadLibraryExW
GetEnvironmentVariableW
GetEnvironmentStringsW
SetErrorMode
InitializeSListHead
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateMutexA
ReleaseMutex
SetEvent
GetSystemTimeAsFileTime
GetCurrentProcess
GetExitCodeProcess
DeleteCriticalSection
LoadLibraryA
GetProcAddress
GetVersionExA
GetCurrentThreadId
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
TerminateProcess
LocalFree
GetFullPathNameW
GetFileType
GetFileSizeEx
GetFileAttributesExW
FindFirstFileW
FindFirstFileA
FindClose
Sleep
UnlockFileEx
UnlockFile
LockFileEx
LockFile
CreateEventA
PeekNamedPipe
WriteFile
ReadFile
WaitForSingleObject
CancelIo
DeviceIoControl
GetOverlappedResult
SetLastError
GetLastError
CloseHandle
SetFilePointer
GetFileInformationByHandle
CreateFileW
SetStdHandle
GetStdHandle
GlobalFree
TlsFree
TlsAlloc
GetCommandLineW
FreeEnvironmentStringsW
FormatMessageA

advapi32

CryptReleaseContext
CryptGenRandom
AllocateAndInitializeSid
FreeSid
GetEffectiveRightsFromAclW
CryptAcquireContextA
GetSecurityInfo
GetNamedSecurityInfoW
GetNamedSecurityInfoA

shell32

CommandLineToArgvW

api-ms-win-crt-utility-l1-1-0

bsearch

Exports

Exports

apr_dbm_type_sdbm

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e17fc4b8de2c3c97a65817b488290eb2

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

wsock32

kernel32

advapi32

shell32

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 5KB - Virtual size: 6KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 5KB - Virtual size: 6KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB