56f25ada9e0411917ecea15055540048

Sharing

Copy URL Twitter E-mail

General

Target

56f25ada9e0411917ecea15055540048
Size

204KB
MD5

56f25ada9e0411917ecea15055540048
SHA1

0c65327aefcce6941c3fd1c541b36402379f6eca
SHA256

a1ca5dc52f507c2cd20cda6ef735977f85cdab168de99c3d878f974a16ae1db4
SHA512

97e77e1d00d7446cccbc9239880099657db5f7bce08f609874e112d82ab3a087a1c892f83ad2d2127fd458d7ba25fe859451a0e6ae244eb93eb856d9ac5dcb8d
SSDEEP

3072:ZbvD/fmxTIWV6Gc/gt0s/jR5clcIXTpQgeclQCeHxrQsB2J1g2NQmL:R7Hmx0WV6ngHNIXNteclQOsYg2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f25ada9e0411917ecea15055540048

Files

56f25ada9e0411917ecea15055540048
.exe windows:4 windows x86 arch:x86

b05589b8c7bd0fcc137c67a97aa5d68c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
CloseHandle
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
Process32NextW
GetCurrentProcessId
Process32FirstW
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
CreateDirectoryW
GetLocalTime
WaitForSingleObject
CreateProcessW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
ExpandEnvironmentStringsW
Sleep
CopyFileW
SetFileAttributesW
GetTickCount
RtlUnwind
RaiseException
ExitProcess
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
WriteFile
QueryPerformanceCounter
GetModuleFileNameA
DeleteCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetTimeZoneInformation
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
InterlockedExchange
VirtualQuery
CreateFileA
InitializeCriticalSection
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
CreateFileW
VirtualProtect
GetSystemInfo
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b05589b8c7bd0fcc137c67a97aa5d68c

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 100KB - Virtual size: 99KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 100KB - Virtual size: 99KB