04ffe7fbc06d89ff246f844745d82a18

Sharing

Copy URL

Twitter E-mail

General

Target

04ffe7fbc06d89ff246f844745d82a18
Size

1.4MB
MD5

04ffe7fbc06d89ff246f844745d82a18
SHA1

01ced09ab8177339945be705ea3d8b9646a6ec99
SHA256

6f2bef308a1b2799b3d5fa78a04f085eadd19c520da2eac8d23df570d88fb82c
SHA512

8f8c6a411914943dab58c00387667df0348a0e66eabbb11783292f30964a1b0d9bb2b8db8a49e25d9914fee7e2fce1cab547bca09c93578925bcac7f4a3cdc0f
SSDEEP

12288:stu8NToi9ADAUL9Mh1AmibZ6HHfHNehk8k8k8ke:s4MtAsu9MUNbAHHvNTFFFe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ffe7fbc06d89ff246f844745d82a18

Files

04ffe7fbc06d89ff246f844745d82a18
.exe windows:4 windows x86 arch:x86

d11bcce33bf06ee44a4212a713eebb50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetProcAddress
GetLocalTime
CompareStringW
CompareStringA
RtlUnwind
GetModuleHandleA
GetStartupInfoW
GetVersionExA
ExitProcess
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
GetLastError
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DebugBreak
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
IsBadCodePtr
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
VirtualProtect
GetSystemInfo
VirtualQuery
SetConsoleCtrlHandler
InterlockedExchange
ReadFile
SetStdHandle
GetTimeFormatA
GetDateFormatA
GetLocaleInfoW
GetTimeZoneInformation
GetACP
GetOEMCP
SetEnvironmentVariableA

gdi32

CreateBitmap

ole32

CoInitialize

Sections

.rda2342
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d11bcce33bf06ee44a4212a713eebb50

Headers

File Characteristics

Imports

kernel32

gdi32

ole32

Sections

.rda2342 Size: 80KB - Virtual size: 78KB

.text Size: 184KB - Virtual size: 180KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 264KB - Virtual size: 318KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 924B

.rda2342
Size: 80KB - Virtual size: 78KB

.text
Size: 184KB - Virtual size: 180KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 264KB - Virtual size: 318KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 924B