223545bed1be9c7cf4e7ff251f5f32bc

Sharing

Copy URL

Twitter E-mail

General

Target

223545bed1be9c7cf4e7ff251f5f32bc
Size

635KB
MD5

223545bed1be9c7cf4e7ff251f5f32bc
SHA1

68af6a6f0b3c7d86e42cb1f0dc255e913e900968
SHA256

15ee04bc83b60d9d07e8446728e98fc21a4f4a5da33477524b896e2670c3e625
SHA512

f0af8280e6be3448c1c9dba031c8727eac0400aac0d81c9e292229dad48f4a149275ba28a06f45120052bcea5896f02c8eccb7609180ec10a15ffc891d149232
SSDEEP

12288:aBXoIbgUtLFvkTfwOFQnLOcJkyvBOW7tTwDj7/8wJIdqjELrqIh:UsjJFQLOkJvBx79wDnJJR6W8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
223545bed1be9c7cf4e7ff251f5f32bc

Files

223545bed1be9c7cf4e7ff251f5f32bc
.exe windows:5 windows x86 arch:x86

30179540246cd9de2ba11d5909419204

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExA

kernel32

SetFilePointer
ExitProcess
FindResourceA
LoadResource
GetCurrentProcess
WaitForSingleObject
FindResourceExA
GetLastError
SetLastError
VirtualProtectEx
LockResource
WriteProcessMemory
CreateThread
IsBadReadPtr
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
EncodePointer
DecodePointer
RaiseException
IsProcessorFeaturePresent
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
RtlUnwind
MultiByteToWideChar
ReadFile
SetHandleCount
GetFileType
DeleteCriticalSection
CloseHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LoadLibraryW
CreateFileA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetEndOfFile
GetProcessHeap
WriteConsoleW
LCMapStringW
GetStringTypeW
CreateFileW

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30179540246cd9de2ba11d5909419204

Headers

DLL Characteristics

File Characteristics

Imports

psapi

kernel32

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 355KB - Virtual size: 355KB

.reloc Size: 5KB - Virtual size: 4KB

.bss Size: - Virtual size: 436KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 355KB - Virtual size: 355KB

.reloc
Size: 5KB - Virtual size: 4KB

.bss
Size: - Virtual size: 436KB