c65e1c8ce231b7b2933d6ffb927c74e02dd16c55634f94654de5c4f4d85c0ab0

Sharing

Copy URL Twitter E-mail

General

Target

c65e1c8ce231b7b2933d6ffb927c74e02dd16c55634f94654de5c4f4d85c0ab0
Size

729KB
MD5

3472303302a11c233c4458062a369004
SHA1

22709ea747092014bbea9f366c5b43660c34acb5
SHA256

c65e1c8ce231b7b2933d6ffb927c74e02dd16c55634f94654de5c4f4d85c0ab0
SHA512

2f29b8103a2a31f0563f339e7e76cb6ebd73576e7a9436f99af88aa9d942de6df6e1b12e926808a5f67eda3e6588a980696095a55b86e4defba5f74884366836
SSDEEP

12288:A5JRijJZTQqjPcoBq3Yy7LfizRBt1/11s7Y7uHoR0eQUNREVQthWqf8:CSD/jPcWq3YrdVbEY4oRTvAVQ2K8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c65e1c8ce231b7b2933d6ffb927c74e02dd16c55634f94654de5c4f4d85c0ab0

Files

c65e1c8ce231b7b2933d6ffb927c74e02dd16c55634f94654de5c4f4d85c0ab0
.exe windows:5 windows x86 arch:x86

46801fc973c31f6b379a81b4265f8876

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputCharacterW
InterlockedDecrement
QueryDosDeviceA
InterlockedCompareExchange
SetComputerNameW
GetComputerNameW
GetModuleHandleW
GetTickCount
GetCommConfig
VirtualFree
GetConsoleAliasesLengthA
GlobalFindAtomA
LoadLibraryW
SetConsoleMode
GetConsoleAliasW
GetWriteWatch
WriteConsoleW
SetComputerNameExW
GetLastError
SetLastError
FindFirstChangeNotificationW
VirtualAlloc
BackupWrite
SetFileAttributesA
LoadLibraryA
InterlockedExchangeAdd
LocalAlloc
CreateHardLinkW
FindFirstVolumeMountPointW
TransmitCommChar
AddAtomW
RemoveDirectoryW
GetThreadPriority
GetStringTypeW
EnumResourceLanguagesW
GetCurrentProcessId
GlobalReAlloc
DeleteFileA
lstrcpyA
GetNativeSystemInfo
GetProcAddress
GetComputerNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
HeapFree
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetLocaleInfoA
HeapSize

gdi32

GetCharABCWidthsFloatW
WidenPath

Sections

.text
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46801fc973c31f6b379a81b4265f8876

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 628KB - Virtual size: 628KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 5KB - Virtual size: 4.1MB

.rsrc Size: 82KB - Virtual size: 82KB

.text
Size: 628KB - Virtual size: 628KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 5KB - Virtual size: 4.1MB

.rsrc
Size: 82KB - Virtual size: 82KB