0a293a8447e1dfbf22376fccd39d3e5fc2218059ea59cc2c401264b457708cf3

Sharing

Copy URL Twitter E-mail

General

Target

0a293a8447e1dfbf22376fccd39d3e5fc2218059ea59cc2c401264b457708cf3
Size

6.4MB
MD5

545e0afd35a0bebe6a25fa9e62932560
SHA1

d1f89d18cb9b9bed17ceaf16be365e2dddd4787f
SHA256

0a293a8447e1dfbf22376fccd39d3e5fc2218059ea59cc2c401264b457708cf3
SHA512

2a00d9b9b078d248b7549a94c0d324a5317ee1bd67273da495e1e0997f87a6674745de839c5737209278809b5c9aac5cfe872ffbfd3e715c81e94245a2060a19
SSDEEP

98304:87Oo08CUG2yea5IH9rDGWM6Ig016xxrpH8W8qNSdHsBnaH3WfGZBul0:87Oo08SDZIH92SIg7xxrpEdHrGeu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a293a8447e1dfbf22376fccd39d3e5fc2218059ea59cc2c401264b457708cf3

Files

0a293a8447e1dfbf22376fccd39d3e5fc2218059ea59cc2c401264b457708cf3
.exe windows:6 windows x86 arch:x86

867b839a485416f7b25fec57447214a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GlobalAlloc
lstrcpyA
CloseHandle
SetFileAttributesA
GlobalLock
ExitProcess
CopyFileA
GlobalUnlock
HeapSize
SetEndOfFile
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
Sleep
WaitForSingleObject
CreateMutexA
GetModuleFileNameW
GetCurrentProcess
CreateDirectoryA
GetModuleFileNameA
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
GetTempPathW
GetStdHandle
WriteFile
GetFileSizeEx
SetFilePointerEx
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapFree
HeapAlloc
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
HeapReAlloc
GetFileAttributesExW
CreateFileW
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
WriteConsoleW
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetClipboardData
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData

advapi32

RegSetValueExA
OpenProcessToken
RegOpenKeyExA
GetTokenInformation
RegCloseKey

shell32

ShellExecuteExW
SHGetKnownFolderPath
ShellExecuteA

ole32

CoTaskMemFree

Sections

.text
Size: - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp»§
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp»§
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp»§
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

867b839a485416f7b25fec57447214a5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: - Virtual size: 162KB

.rdata Size: - Virtual size: 67KB

.data Size: - Virtual size: 7KB

.vmp»§ Size: - Virtual size: 3.0MB

.vmp»§ Size: 1024B - Virtual size: 852B

.vmp»§ Size: 6.3MB - Virtual size: 6.3MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 98KB - Virtual size: 422KB

.text
Size: - Virtual size: 162KB

.rdata
Size: - Virtual size: 67KB

.data
Size: - Virtual size: 7KB

.vmp»§
Size: - Virtual size: 3.0MB

.vmp»§
Size: 1024B - Virtual size: 852B

.vmp»§
Size: 6.3MB - Virtual size: 6.3MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 98KB - Virtual size: 422KB