65945cc00409597baaa59a522ab6551f

Sharing

Copy URL

Twitter E-mail

General

Target

65945cc00409597baaa59a522ab6551f
Size

848KB
MD5

65945cc00409597baaa59a522ab6551f
SHA1

5f9a9f083eb70494436f189cc2f363f1fbd4c7ac
SHA256

6bf5edecee0eeff3982e4c9c36f50e4e8e1300d09b9519f3d03b169a0a5ffcf9
SHA512

0a1dad29efd3809e1288cfaaeea0756698f2fcd7376f7c175a9dc591c51177b01ef3ef2c5f99f1ab6715a6fc53e181b984390f15e0d8d8116d862dba5b6dc255
SSDEEP

24576:yziOHQ0D0N4iYd0eOADEit9NZZvK053sFkKBiJ/R:yziiQN4PPb7zUMuiB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65945cc00409597baaa59a522ab6551f

Files

65945cc00409597baaa59a522ab6551f
.exe windows:5 windows x86 arch:x86

60d5a735967a737ba695a2cfbe5c2662

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

scecli

SceSvcConvertSDToText
SceGetAnalysisAreaSummary
SceNotifyPolicyDelta
SceGetDatabaseSetting
SceOpenPolicy
SceSetupUnwindSecurityFile
SceAppendSecurityProfileInfo
SceSetupConfigureServices
SceSetupUpdateSecurityService
SceAddToNameList
SceIsSystemDatabase
SceRollbackTransaction
SceRegisterRegValues
DeltaNotify
SceSetupBackupSecurity
SceCompareSecurityDescriptors
SceSetupUpdateSecurityFile
SceProcessSecurityPolicyGPO
SceGetScpProfileDescription
SceCreateDirectory

kernel32

BuildCommDCBW
SetFileShortNameA
ScrollConsoleScreenBufferA
GetCurrencyFormatA
ReadConsoleOutputA
EnumCalendarInfoExW
DeleteFileA
SetLastConsoleEventActive
VirtualAllocEx
UnhandledExceptionFilter
GetPrivateProfileSectionW
GetThreadContext
VirtualAlloc
LoadLibraryA
GetEnvironmentStringsW
GlobalFix
EnumUILanguagesA
GlobalHandle
GlobalAddAtomA
ReadConsoleInputExW
LZInit
GetCurrentActCtx
SearchPathW

ntdll

ZwQueryPortInformationProcess
ZwMapUserPhysicalPages
ZwAllocateUuids
NtAllocateUuids
ZwPrivilegeObjectAuditAlarm
KiUserApcDispatcher
RtlGetFrame
ZwSetThreadExecutionState
ZwGetContextThread
RtlUpperChar
RtlDebugPrintTimes
NtAssignProcessToJobObject
NtSetLowWaitHighEventPair
NtQueryInformationToken
RtlSecondsSince1970ToTime
ZwQueryDirectoryFile
CsrAllocateMessagePointer
RtlOemStringToUnicodeString
RtlActivateActivationContextUnsafeFast
RtlNtPathNameToDosPathName
ZwListenPort
NtSetValueKey
NtSignalAndWaitForSingleObject
ZwAccessCheckByType
ZwQueryInformationThread
NtQueryEvent
NtOpenThread
NtMapViewOfSection
NtSetIntervalProfile
NtResetEvent
ceil
NtAllocateVirtualMemory
RtlRealSuccessor
NtOpenDirectoryObject
RtlSetSecurityDescriptorRMControl
RtlNumberOfSetBits
NtDeleteFile

Sections

.text
Size: 724KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60d5a735967a737ba695a2cfbe5c2662

Headers

DLL Characteristics

File Characteristics

Imports

scecli

kernel32

ntdll

Sections

.text Size: 724KB - Virtual size: 724KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 4KB - Virtual size: 1.4MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 724KB - Virtual size: 724KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 4KB - Virtual size: 1.4MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB