75cde21e312b2027780644fff8bd18f0

Sharing

Copy URL Twitter E-mail

General

Target

75cde21e312b2027780644fff8bd18f0
Size

164KB
MD5

75cde21e312b2027780644fff8bd18f0
SHA1

fe17a4a5728041af5bd9c0cb6dc634ea443ebc8d
SHA256

e36ea88c9197fd42bd890b24de532afca1debe4d7a9867afcc83b04f09db6860
SHA512

235d571d73a5171bad022afd2f5af3d65c03d6f7db873703a34f3373a21e7f6f3719e7f94ea804242a892fdeaddfd4a78279b4c9c198a4fee7adf3e2b6f8ef5f
SSDEEP

3072:mbCmsbFfEXfrFELTMYgUENwRdixdtpVsPH:cqRC2LjKwrixYf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75cde21e312b2027780644fff8bd18f0

Files

75cde21e312b2027780644fff8bd18f0
.exe windows:5 windows x86 arch:x86

7d43a3f24a0aa4777b94a339f8ebd029

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TryEnterCriticalSection
lstrlenA
WriteTapemark
ReadConsoleA
InterlockedDecrement
ZombifyActCtx
GetEnvironmentStringsW
GetTimeFormatA
GetModuleHandleW
GetTickCount
WaitNamedPipeW
GetConsoleCP
GlobalAlloc
SetFileShortNameW
GetGeoInfoA
lstrcatA
GetVolumePathNameA
ReleaseActCtx
GetProcAddress
ResetEvent
InterlockedExchangeAdd
LocalAlloc
GlobalFindAtomW
GetOEMCP
EnumDateFormatsA
CreateMutexA
RequestDeviceWakeup
BuildCommDCBA
ReadConsoleInputW
DeleteFileA
lstrcpyA
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetACP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW

Exports

Exports

@GetVice@4
@SetVice@8

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d43a3f24a0aa4777b94a339f8ebd029

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 10KB - Virtual size: 8.1MB

.rsrc Size: 38KB - Virtual size: 38KB

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 10KB - Virtual size: 8.1MB

.rsrc
Size: 38KB - Virtual size: 38KB