00e869609010bdf010059e305bd7b83e

Sharing

Copy URL Twitter E-mail

General

Target

00e869609010bdf010059e305bd7b83e
Size

39KB
MD5

00e869609010bdf010059e305bd7b83e
SHA1

33d944c6f72fce6d286b9cbc70b8dc1fed43e7f0
SHA256

158c99c7b71c1ccc9afec3033f23ab975b2f9c00fadd2ef590501c17e907341f
SHA512

817f46e9170047563390fb82952e587e11755dca9bb83f75453d861043b4eaa4e530e914c166b0f89a02501425e5e5d3ba6238de1b8241c223dab28fc7be5752
SSDEEP

768:zhdEnDCJzM34spb/X8wgLg0YMFx1hjns4t86c5Q:zsOV2T5/X860NFBjns4t86mQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e869609010bdf010059e305bd7b83e

Files

00e869609010bdf010059e305bd7b83e
.exe windows:4 windows x86 arch:x86

eba9493ef4758478f82d53a64f033139

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal
CoTaskMemFree

kernel32

GlobalAlloc
GetFileSize
GetLocalTime
CloseHandle
CreateFileA
CreateFileMappingA
CreateToolhelp32Snapshot
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetComputerNameA
GetCurrentDirectoryA
GetDiskFreeSpaceA
lstrlenW
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
WideCharToMultiByte
UnmapViewOfFile
Sleep
Process32Next
Process32First
OpenProcess
MultiByteToWideChar
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalMemoryStatus
GlobalFree
GetLocaleInfoA
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetTempPathA
GetSystemDirectoryA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetModuleFileNameA
GetLogicalDrives
GetDriveTypeA

user32

ReleaseDC
MessageBoxA
GetDC
wsprintfA

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreateVector

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
GetUserNameA

shlwapi

StrChrA
StrRChrA
StrStrIA
StrCmpNA

shell32

ShellExecuteA

wsock32

socket
send
recv
gethostname
connect
closesocket
WSAStartup

ws2_32

WSAIoctl

rasapi32

RasEnumEntriesA
RasGetEntryPropertiesA
RasGetEntryDialParamsA

gdi32

GetDeviceCaps

Sections

Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 524B - Virtual size: 524B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eba9493ef4758478f82d53a64f033139

Headers

File Characteristics

Imports

ole32

kernel32

user32

oleaut32

advapi32

shlwapi

shell32

wsock32

ws2_32

rasapi32

gdi32

Sections

Size: 20KB - Virtual size: 20KB

Size: 2KB - Virtual size: 2KB

Size: 4KB - Virtual size: 185KB

Size: 10KB - Virtual size: 10KB

.nah Size: 524B - Virtual size: 524B

.nah
Size: 524B - Virtual size: 524B