4f53769e856d50b5bdb3ea262bfb9086

Sharing

Copy URL Twitter E-mail

General

Target

4f53769e856d50b5bdb3ea262bfb9086
Size

464KB
MD5

4f53769e856d50b5bdb3ea262bfb9086
SHA1

1a4e2c09649f908ec57ff2272a415124f6ce3bd1
SHA256

eb5e00d944e85e38e8e5b0857c539a3045bc8922cfc1c904951d96e4d520760a
SHA512

d88e191ef51629299fa311a5eb4537fbffd40f59f06152701274a92123727afd9720bca0b7b36d566f6d7bc26478d02fc50f8eb8350bf06600df5cbf24f08232
SSDEEP

12288:h6sKe8wrjFZXBZjzRsHP79lIIM/Lz09deCPqEZ:ht9tr5fZyHP47/qd/qEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f53769e856d50b5bdb3ea262bfb9086

Files

4f53769e856d50b5bdb3ea262bfb9086
.exe windows:4 windows x86 arch:x86

20e64a7f4d72c8b5601f8482cd26e2f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

LdrGetDllHandle
NtAllocateVirtualMemory
RtlLargeIntegerToChar

rpcrt4

NdrClearOutParameters
NdrSimpleStructBufferSize
NdrStubGetBuffer
NdrProxyFreeBuffer
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrConformantArrayBufferSize
NdrPointerUnmarshall
CStdStubBuffer_IsIIDSupported
NdrSimpleTypeMarshall
NdrUserMarshalBufferSize
NdrDllCanUnloadNow
NdrProxySendReceive
NdrConformantStringUnmarshall
NdrConvert
NdrSimpleTypeUnmarshall
CStdStubBuffer_DebugServerRelease
NdrProxyGetBuffer
NdrPointerMarshall
NdrProxyInitialize
NdrPointerBufferSize
NdrAllocate
NdrOleAllocate
NdrStubInitialize
NdrInterfacePointerFree
NdrPointerFree
IUnknown_Release_Proxy
NdrStubCall2
NdrConformantStringBufferSize
NdrDllGetClassObject
NdrSimpleStructMarshall
NdrSimpleStructUnmarshall
NdrUserMarshalMarshall
IUnknown_QueryInterface_Proxy
NdrCStdStubBuffer_Release
NdrConformantStringMarshall
CStdStubBuffer_Invoke
NdrStubForwardingFunction
CStdStubBuffer_AddRef
NdrProxyErrorHandler
RpcRaiseException
NdrConformantArrayMarshall
CStdStubBuffer_CountRefs
NdrCStdStubBuffer2_Release
NdrUserMarshalUnmarshall
IUnknown_AddRef_Proxy
NdrOleFree
NdrConformantArrayUnmarshall
NdrInterfacePointerBufferSize
CStdStubBuffer_Disconnect
NdrInterfacePointerUnmarshall
CStdStubBuffer_DebugServerQueryInterface
NdrUserMarshalFree
NdrInterfacePointerMarshall
CStdStubBuffer_Connect
CStdStubBuffer_QueryInterface

msvcrt

_except_handler3
free
_adjust_fdiv
_initterm
malloc

kernel32

QueryPerformanceCounter
TerminateProcess
GetTickCount
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 984KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

20e64a7f4d72c8b5601f8482cd26e2f6

Headers

File Characteristics

Imports

ntdll

rpcrt4

msvcrt

kernel32

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 408KB - Virtual size: 407KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 20B

.data Size: 14KB - Virtual size: 984KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 408KB - Virtual size: 407KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 20B

.data
Size: 14KB - Virtual size: 984KB