5c1d7f801a9ce4b84fecc8e4c8efb209

Sharing

Copy URL

Twitter E-mail

General

Target

5c1d7f801a9ce4b84fecc8e4c8efb209
Size

94KB
MD5

5c1d7f801a9ce4b84fecc8e4c8efb209
SHA1

5775e03f89edac3093dba97c3e774fd885d3e924
SHA256

2a3dc6a464922f301d790240d94a2e1d9866d8217ba97c5db42c19da03e65b4c
SHA512

182d03508342ccddfad00589298ef9ed8d40650755bf63c81bd342877d69b981474ef204a87b158fd472566508b74bb00dd7b11c40acecee8c888168d3bf71cc
SSDEEP

1536:HA81vtjzpNXCZoDRfpTCY2rCWtwcLbkPFAfoZa:Hj1Jzy0RhTCvdtjuAfoZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c1d7f801a9ce4b84fecc8e4c8efb209

Files

5c1d7f801a9ce4b84fecc8e4c8efb209
.exe windows:5 windows x86 arch:x86

77d77d7b5efcb6be93a8d0a019c6afa5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFileSize
GetTickCount
GetModuleHandleW
GetCommandLineA
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
GetVersionExA
WriteFile
GetModuleHandleA
VirtualAlloc
HeapAlloc
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

UpdateWindow
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadStringA
FindWindowA
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
GetSystemMetrics
LoadIconA
CreateWindowExA
ShowWindow

advapi32

RegOpenKeyExA

Sections

CODE
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77d77d7b5efcb6be93a8d0a019c6afa5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

CODE Size: 47KB - Virtual size: 47KB

DATA Size: 2KB - Virtual size: 1KB

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 10KB

.rsrc Size: 5KB - Virtual size: 5KB

CODE
Size: 47KB - Virtual size: 47KB

DATA
Size: 2KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 10KB

.rsrc
Size: 5KB - Virtual size: 5KB