4718067e3e7b2de52dcdb60475f4f800

Sharing

Copy URL

Twitter E-mail

General

Target

4718067e3e7b2de52dcdb60475f4f800
Size

12.5MB
MD5

4718067e3e7b2de52dcdb60475f4f800
SHA1

e8dc7059536917d1e9bd7d0aff721f945785db1d
SHA256

b2b52413eb8374756d3fff43e2f16d6229dc1327edd1f5fb225bd3c0fecad4f8
SHA512

3f5866d8bf4ea81143be22e032643677d01d7fa8e2cc77d5a5c68c03c2c8697b8241ebe6c60f96bc7b36651d26073f568a9204158523ab48962c1e337eb55561
SSDEEP

49152:CWqmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm7:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4718067e3e7b2de52dcdb60475f4f800

Files

4718067e3e7b2de52dcdb60475f4f800
.exe windows:5 windows x86 arch:x86

3e5e22afadcf458c018dd0ba7481a647

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleExA
SetEndOfFile
HeapAlloc
InterlockedIncrement
CreateJobObjectW
SetConsoleScreenBufferSize
UnlockFile
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesA
GetCompressedFileSizeW
ReadConsoleOutputA
AddRefActCtx
GetLocaleInfoW
SizeofResource
GetFileAttributesA
GetTimeFormatW
GetAtomNameW
lstrcatA
FindNextVolumeMountPointW
CreateDirectoryA
ChangeTimerQueueTimer
GetProcAddress
HeapSize
FreeUserPhysicalPages
PrepareTape
GetModuleHandleA
SetFileAttributesW
LCMapStringW
CloseHandle
CreateFileW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
RaiseException
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetLastError
HeapCreate
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
HeapQueryInformation
HeapFree
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers

Exports

Exports

Memories
Roses
Sos
Surrender

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yosu
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12.2MB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e5e22afadcf458c018dd0ba7481a647

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 11KB - Virtual size: 4.0MB

.yosu Size: 1KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 12.2MB - Virtual size: 22KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 11KB - Virtual size: 4.0MB

.yosu
Size: 1KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 12.2MB - Virtual size: 22KB