672ed72e1302686776f7d96d8bcba951

Sharing

Copy URL Twitter E-mail

General

Target

672ed72e1302686776f7d96d8bcba951
Size

357KB
MD5

672ed72e1302686776f7d96d8bcba951
SHA1

17e87a3b096d51225a4ec5df54c979e5b82d4f6d
SHA256

00ac50fbdc4dd12a1e17a9d12b731811ec51e3a0888749a0aefed9df567c0942
SHA512

1934fd397b91032f91fdc948357143faa2a2e8a0f4f8542ebc6720cba4233bbb986e3dc8169f05067be9802e6cbac45033a3d6c3a4a0fe9fcc8e19605094f50a
SSDEEP

6144:sloBa3N8nxKhd2fPlHluF0Iq7RK9c9X2X0F/0lrW9SohyMTlzwV+ha7:sloBYNKUcVHK0fycr9So4MpzwV3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
672ed72e1302686776f7d96d8bcba951

Files

672ed72e1302686776f7d96d8bcba951
.exe windows:6 windows x64 arch:x64

3f4f432113f7fb6831255714de92c87c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory

kernel32

SetFilePointerEx
FlushFileBuffers
SetStdHandle
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetModuleFileNameW
GetCurrentProcessId
CreateFileW
MultiByteToWideChar
CloseHandle
WideCharToMultiByte
WriteFile
WaitNamedPipeW
Sleep
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
LoadLibraryW
GetProcAddress
WriteConsoleW
FormatMessageW
LocalFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
GetACP
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
EncodePointer
GetStringTypeW
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
VirtualAlloc
VirtualFree
LoadLibraryExA
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
RtlPcToFileHeader
RtlUnwindEx

user32

UnregisterClassW
EndPaint
BeginPaint
PostQuitMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
DispatchMessageW
TranslateMessage
LoadCursorW
GetClassInfoExW
UpdateWindow
DefWindowProcW
CallWindowProcW
PostMessageW
SetWindowLongPtrW
SendMessageW
GetWindowLongPtrW

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

VariantClear
VariantInit

shlwapi

StrStrIW

iphlpapi

GetAdaptersAddresses
GetIfEntry

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ecohjhu
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3f4f432113f7fb6831255714de92c87c

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

kernel32

user32

ole32

oleaut32

shlwapi

iphlpapi

Sections

.text Size: 194KB - Virtual size: 194KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 12KB - Virtual size: 18KB

.pdata Size: 11KB - Virtual size: 11KB

.gfids Size: 512B - Virtual size: 512B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 31KB - Virtual size: 32KB

ecohjhu Size: - Virtual size: 4KB

.text
Size: 194KB - Virtual size: 194KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 12KB - Virtual size: 18KB

.pdata
Size: 11KB - Virtual size: 11KB

.gfids
Size: 512B - Virtual size: 512B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 31KB - Virtual size: 32KB

ecohjhu
Size: - Virtual size: 4KB