fe5dce0e244825dca7eb93e8b92b76db8cab6ad8231a977aaa442c98d5b7414d

Sharing

Copy URL Twitter E-mail

General

Target

fe5dce0e244825dca7eb93e8b92b76db8cab6ad8231a977aaa442c98d5b7414d
Size

4.8MB
MD5

a9d575ed648e5e9f50c7f6844abc0761
SHA1

b7dc223ba1c9e0e627c12ad90905e9fea37cbe51
SHA256

fe5dce0e244825dca7eb93e8b92b76db8cab6ad8231a977aaa442c98d5b7414d
SHA512

6aa486af8108b4e4c18272ed7ba45980a92725913d756815331a22a883e4a87698f6b9840b8bd95f572eeb883b6758aed055a601775fc797061c4cc62314b5f6
SSDEEP

98304:eaBCYt4pA+xq4DwDTBxqf5r/gcWu5Okpes1eoKiiQmtlv07iict9i:dB5l+xq4sxO5zmEzgJ20vwiiW9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe5dce0e244825dca7eb93e8b92b76db8cab6ad8231a977aaa442c98d5b7414d

Files

fe5dce0e244825dca7eb93e8b92b76db8cab6ad8231a977aaa442c98d5b7414d
.exe windows:5 windows x86 arch:x86

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetProcAddress
LoadLibraryExW
SizeofResource
LockResource
LoadLibraryW
FindResourceW
WriteFile
GetModuleFileNameW
CreateFileW
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetTempPathW
GetFileAttributesW
GetCurrentDirectoryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
GetCurrentThreadId
Sleep
RaiseException
GetCommandLineW
SetFilePointerEx
FlushFileBuffers
FindFirstFileExW
FindNextFileW
FindClose
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleExW
GetVersionExW
GetNativeSystemInfo
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetEnvironmentVariableW
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
IsValidCodePage
GetDriveTypeW
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
HeapReAlloc
ExitProcess
HeapSize
GetFileType
SetStdHandle
GetFullPathNameW
GetConsoleMode
GetConsoleCP
LoadLibraryExA
HeapFree
LoadLibraryA
HeapAlloc
GetProcessHeap
IsBadReadPtr
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind

ole32

CoTaskMemFree

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ress
Size: 10.6MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 3KB - Virtual size: 11KB

.gfids Size: 512B - Virtual size: 444B

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 8KB - Virtual size: 7KB

.ress Size: 10.6MB - Virtual size: 10.5MB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 3KB - Virtual size: 11KB

.gfids
Size: 512B - Virtual size: 444B

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 8KB - Virtual size: 7KB

.ress
Size: 10.6MB - Virtual size: 10.5MB