15678912e8711440cd89fed63ef9d25ce4432d44fc5396b046a8c56c29fd507a

Sharing

Copy URL Twitter E-mail

General

Target

15678912e8711440cd89fed63ef9d25ce4432d44fc5396b046a8c56c29fd507a
Size

665KB
MD5

701c957614453de550805b9bacbd65c5
SHA1

f271eef4ffb76076e87f95af54dfab52ec4c15d3
SHA256

15678912e8711440cd89fed63ef9d25ce4432d44fc5396b046a8c56c29fd507a
SHA512

8b58dddde3e2594a4102d0b352b3cec6840b996eb40d9b7cf8cbbc2d8a384e483bc8f7a9e0180a8de6aeef633775daa69719fa095521965afd9470fe223e45f3
SSDEEP

12288:uPR2zfywc6e6ZZvRLpvNu1vyeWuksrxNGFdA/nQTugvGmxl:uozfyRApx81vyDqrxNiZemxl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15678912e8711440cd89fed63ef9d25ce4432d44fc5396b046a8c56c29fd507a

Files

15678912e8711440cd89fed63ef9d25ce4432d44fc5396b046a8c56c29fd507a
.exe windows:5 windows x86 arch:x86

ad3394ad6edaa5f9689b4047ace0d599

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\yicopumoc36_fohito\lageheb\rel\bopevekilep.pdb

Imports

kernel32

SetVolumeLabelA
SetComputerNameExA
InterlockedIncrement
InterlockedDecrement
QueryDosDeviceA
GetTickCount
EnumResourceTypesA
GetModuleFileNameW
CreateJobObjectA
GetLogicalDriveStringsA
GetLastError
GetProcAddress
AttachConsole
VirtualAlloc
GetConsoleDisplayMode
LoadLibraryA
WriteConsoleA
LocalAlloc
MoveFileA
RemoveDirectoryW
GlobalFindAtomW
FindFirstVolumeMountPointA
GetModuleHandleA
GetConsoleTitleW
GetFileAttributesExW
FatalAppExitA
GetCurrentProcessId
AddConsoleAliasA
ReadConsoleOutputCharacterW
DeleteFileA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
RaiseException

Sections

.text
Size: 612KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 38.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad3394ad6edaa5f9689b4047ace0d599

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 612KB - Virtual size: 612KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 18KB - Virtual size: 38.9MB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 612KB - Virtual size: 612KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 18KB - Virtual size: 38.9MB

.rsrc
Size: 23KB - Virtual size: 22KB