02acf04d85be0fb9f9030200a7031104

Sharing

Copy URL

Twitter E-mail

General

Target

02acf04d85be0fb9f9030200a7031104
Size

277KB
MD5

02acf04d85be0fb9f9030200a7031104
SHA1

a9183afe43c86729e0055666e130dbe2c09f8671
SHA256

76da21be761084b0c32ef2903791821d7a210f2e5c4980d9c7ce86989eed2b70
SHA512

f9166276fd43df3b4ef6359bc86d19b4afb95e04b5fc13d2167f9c28ae84b013fb3765c30b9a3650a4e70846375fc3293f7764691873fd22cf6f7b3d6d7b17e6
SSDEEP

3072:fDTMk3L6W+iE6rRvM1gsiKYHnhMqooNZA5vObfeU2K6gvX:fnMeL9+iprlM3iBHheQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02acf04d85be0fb9f9030200a7031104

Files

02acf04d85be0fb9f9030200a7031104
.exe windows:5 windows x86 arch:x86

805dbd3e1a4682acf1f4c696c2ba2ae3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
InterlockedIncrement
QueryDosDeviceA
InterlockedCompareExchange
SetComputerNameW
FindCloseChangeNotification
GetTickCount
GetConsoleAliasesLengthA
GlobalFindAtomA
SetConsoleMode
WriteConsoleW
SetComputerNameExW
GetStartupInfoA
GetLastError
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
LoadLibraryA
InterlockedExchangeAdd
LocalAlloc
CreateHardLinkW
AddAtomW
lstrcmpiW
GetModuleHandleA
VirtualProtect
PurgeComm
CompareStringA
DeleteFileW
GetCurrentProcessId
DebugBreak
ResetWriteWatch
ResumeThread
GetConsoleOutputCP
MultiByteToWideChar
GetModuleHandleW
Sleep
ExitProcess
GetStartupInfoW
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapFree
WriteFile
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
CreateFileA
HeapAlloc
HeapReAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleA

user32

SetMessageExtraInfo

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

805dbd3e1a4682acf1f4c696c2ba2ae3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 19KB - Virtual size: 4.1MB

.rsrc Size: 114KB - Virtual size: 113KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 19KB - Virtual size: 4.1MB

.rsrc
Size: 114KB - Virtual size: 113KB