4c3fa5ca3ee00c1cd4320b3c1cd56d55

Sharing

Copy URL Twitter E-mail

General

Target

4c3fa5ca3ee00c1cd4320b3c1cd56d55
Size

23.8MB
MD5

4c3fa5ca3ee00c1cd4320b3c1cd56d55
SHA1

9bc7aefb271fe515ff9aff42040586c463c689a9
SHA256

6c53ffeab362ea4652791de391452bb09dd7ccb1a8d55ce8ac4bc230ea1da591
SHA512

62dc7a434b4f7ba58a6c2cda91d067166f2c8617c96827c4fba778e90dec647bca22d98571458acb01d5ad7ccd8b6caa15d6cf65fc568e3df00e6c970ad757d1
SSDEEP

393216:oJJYDIn8UnwpVJS+ZGDP2xZnq0CgFFmzJJYDIn8UnwpVJS+ZGDP2xZnq0CgFFm:+4UnwDJS+cDP22aFm94UnwDJS+cDP22x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c3fa5ca3ee00c1cd4320b3c1cd56d55

Files

4c3fa5ca3ee00c1cd4320b3c1cd56d55
.exe windows:5 windows x64 arch:x64

1f80f1cd81b94f85521db216e293a080

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxA

kernel32

UnhandledExceptionFilter
GetVersionExA
GetProcAddress
LoadLibraryA
GetLastError
ExpandEnvironmentStringsA
GetEnvironmentVariableA
SetEnvironmentVariableA
GetShortPathNameW
GetTempPathW
Sleep
LoadLibraryExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetCommandLineW
GetStartupInfoW
GetStdHandle
GetModuleFileNameW
HeapSize
RtlUnwindEx
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryA
GetCurrentProcessId
DeleteFileA
RemoveDirectoryA
FindNextFileA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DecodePointer
EncodePointer
SetConsoleCtrlHandler
GetModuleHandleW
ExitProcess
HeapReAlloc
GetDriveTypeW
GetFullPathNameA
GetFileAttributesA
GetCommandLineA
TerminateProcess
GetCurrentProcess
CompareStringW
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CloseHandle
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
WriteFile
SetHandleCount
DeleteCriticalSection
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LoadLibraryW
CreateFileW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetEndOfFile
GetProcessHeap
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
GetStringTypeW

ws2_32

ntohl

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_pyi_bootstrap.pyc
coordinater_last.pyc
pyi_carchive.pyc

Sharing

General

Malware Config

Signatures

Files

1f80f1cd81b94f85521db216e293a080

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

ws2_32

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 7KB - Virtual size: 47KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 330KB - Virtual size: 330KB

.reloc Size: 1KB - Virtual size: 1KB

.l2 Size: 244KB - Virtual size: 244KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 7KB - Virtual size: 47KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 330KB - Virtual size: 330KB

.reloc
Size: 1KB - Virtual size: 1KB

.l2
Size: 244KB - Virtual size: 244KB