4246e8bfb7ff63c33010c8fd83b57426

Sharing

Copy URL Twitter E-mail

General

Target

4246e8bfb7ff63c33010c8fd83b57426
Size

13.0MB
MD5

4246e8bfb7ff63c33010c8fd83b57426
SHA1

85059d0decccfced5f8e1eaccfd9f74184a33abd
SHA256

86915d4af9ceab8fa16d20a588a5cfb67d997657a97469cfd7f68a738c9b7458
SHA512

a85ca2e48771942217a397ea00643e3c463d19bad6cadfde62c51e3738d030760d925386ad1f89891d1f4e88600f098cd7464e15152013112a5dd2559e6eb51d
SSDEEP

49152:yWqmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm3:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4246e8bfb7ff63c33010c8fd83b57426

Files

4246e8bfb7ff63c33010c8fd83b57426
.exe windows:5 windows x86 arch:x86

3e5e22afadcf458c018dd0ba7481a647

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleExA
SetEndOfFile
HeapAlloc
InterlockedIncrement
CreateJobObjectW
SetConsoleScreenBufferSize
UnlockFile
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesA
GetCompressedFileSizeW
ReadConsoleOutputA
AddRefActCtx
GetLocaleInfoW
SizeofResource
GetFileAttributesA
GetTimeFormatW
GetAtomNameW
lstrcatA
FindNextVolumeMountPointW
CreateDirectoryA
ChangeTimerQueueTimer
GetProcAddress
HeapSize
FreeUserPhysicalPages
PrepareTape
GetModuleHandleA
SetFileAttributesW
LCMapStringW
CloseHandle
CreateFileW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
RaiseException
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetLastError
HeapCreate
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
HeapQueryInformation
HeapFree
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers

Exports

Exports

Memories
Roses
Sos
Surrender

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yosu
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12.7MB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e5e22afadcf458c018dd0ba7481a647

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 11KB - Virtual size: 4.0MB

.yosu Size: 1KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 12.7MB - Virtual size: 22KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 11KB - Virtual size: 4.0MB

.yosu
Size: 1KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 12.7MB - Virtual size: 22KB