4a7d3b31cf66a4b8468ea25bc1bad930

Sharing

Copy URL

Twitter E-mail

General

Target

4a7d3b31cf66a4b8468ea25bc1bad930
Size

159KB
MD5

4a7d3b31cf66a4b8468ea25bc1bad930
SHA1

bdaee97ae89038e139500e200140bcc594571545
SHA256

462fb015d2ec0d785a4f164a53a87c94e415ff39011d8740d999333d7053040c
SHA512

d97ea8c40d2a6e7974c2c411a9a10038b26779e302a7c0521fc16b02303ccd0811edbb9aaa021a867fa43657b16052494480b577fb2e85d472772dc463b27259
SSDEEP

3072:KdayCwJmPZe+sL5gUu1x15m1fPO6XCvkvq/y+W6sYzgo9Qb1UYJWKaHDfR7xO5r:KdFCCmxrO61T54mWCvkJd6rfQb1rcur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a7d3b31cf66a4b8468ea25bc1bad930

Files

4a7d3b31cf66a4b8468ea25bc1bad930
.exe windows:4 windows x86 arch:x86

5f04301bdf5b0dbba1ee19f1dd821146

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
GetModuleHandleA
GetLocaleInfoW
GetThreadContext
FindClose
SetFilePointer
FreeEnvironmentStringsA
GetCurrentThread
InterlockedIncrement
GetSystemInfo
LocalFree
WriteConsoleW
SetHandleCount
VirtualQueryEx
LoadLibraryA
GetNumberFormatA
FormatMessageA
FindFirstFileA
GlobalUnlock
HeapSize
IsValidCodePage
GetModuleHandleW
UnhandledExceptionFilter
CreateFileMappingA
TerminateThread
Module32Next
SearchPathA
GetVersion
FlushFileBuffers
CreateFileA
GetLocaleInfoA
SetThreadAffinityMask
GetExitCodeThread
HeapReAlloc
GetProcAddress
CreateEventA
GetEnvironmentVariableA
GetCurrentProcessId
GetConsoleOutputCP
ReadProcessMemory
GetCommandLineA
VirtualAlloc
GetTickCount
SetProcessWorkingSetSize
GetDriveTypeA
EnterCriticalSection
GetFileType
GetCurrentProcess
FileTimeToSystemTime
IsDebuggerPresent
GetCurrentDirectoryA
GetEnvironmentStrings
FreeLibrary
PulseEvent
WideCharToMultiByte
InterlockedDecrement
GetStartupInfoA
GetComputerNameW
VirtualFree
GetStringTypeA
OpenEventA
UnmapViewOfFile
ResumeThread
MulDiv
lstrcpynA
GetSystemDirectoryA
ExitProcess
WaitForMultipleObjects
SetPriorityClass
GetACP
GlobalLock
SetUnhandledExceptionFilter
GetProcessAffinityMask
LCMapStringA
GetCurrentThreadId
CloseHandle
DeviceIoControl
GetCPInfo
QueryPerformanceCounter
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteFile
WaitForSingleObject
IsBadReadPtr
RtlUnwind
lstrcmpiA
GetStringTypeW
GetModuleFileNameA
FileTimeToLocalFileTime

msvcrt

_XcptFilter
__p__commode
__p__fmode
__setusermatherr
memcpy
exit
__set_app_type
_exit
_adjust_fdiv
_except_handler3
__getmainargs
_acmdln
_initterm
_controlfp

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f04301bdf5b0dbba1ee19f1dd821146

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 139KB - Virtual size: 138KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 80KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 139KB - Virtual size: 138KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 80KB

.rsrc
Size: 7KB - Virtual size: 7KB