ce5b39c86797e75ebcb8c94faa592be26dda5ba6ba405b9bc27bea582cf39e24

Sharing

Copy URL Twitter E-mail

General

Target

ce5b39c86797e75ebcb8c94faa592be26dda5ba6ba405b9bc27bea582cf39e24
Size

239KB
MD5

9535a432a907ffb6e43bc88fa617add6
SHA1

617a40f8142ed76f91aee7d3614429f79f008890
SHA256

ce5b39c86797e75ebcb8c94faa592be26dda5ba6ba405b9bc27bea582cf39e24
SHA512

9447f0eb7cc25e1712e89ca18fc547b58416cecc43976b64102faefd63fc040ba0c92df499f88322310af8b876188a7d9ed842ce5c0aaf4a3fa26573411619a1
SSDEEP

3072:vGD8OL8+0J1Sv8ElRFZiqdFYv8FkBbDxX745mOJG:NOLUwrlViqI86tV3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce5b39c86797e75ebcb8c94faa592be26dda5ba6ba405b9bc27bea582cf39e24

Files

ce5b39c86797e75ebcb8c94faa592be26dda5ba6ba405b9bc27bea582cf39e24
.exe windows:5 windows x86 arch:x86

11cc60f9b355aa2f5612d8c511ba0361

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dix58\yizigo gabogemas30-sucucuc_fopep9\dapixin.pdb

Imports

kernel32

InterlockedIncrement
GetLogicalDriveStringsW
GetFileAttributesExA
GetModuleHandleW
GetTickCount
ReadConsoleW
EnumResourceTypesA
TlsSetValue
LoadLibraryW
SetCommConfig
FreeConsole
GetConsoleWindow
GetModuleFileNameW
FindNextVolumeMountPointW
CreateJobObjectA
InterlockedExchange
GetLastError
GetProcAddress
SetComputerNameExA
SetVolumeLabelW
RemoveDirectoryA
LoadLibraryA
OpenMutexA
LocalAlloc
MoveFileA
GetNumberFormatW
GlobalFindAtomW
GetConsoleTitleW
VirtualProtect
GetCurrentProcessId
AddConsoleAliasA
GetConsoleProcessList
ReadConsoleOutputCharacterW
DeleteFileA
VirtualAlloc
GetSystemDefaultLangID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
HeapFree
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
RaiseException
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

LoadMenuW

gdi32

GetCharABCWidthsFloatW

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11cc60f9b355aa2f5612d8c511ba0361

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

Sections

.text Size: 139KB - Virtual size: 139KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 20KB - Virtual size: 68KB

.rsrc Size: 56KB - Virtual size: 1.9MB

.text
Size: 139KB - Virtual size: 139KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 20KB - Virtual size: 68KB

.rsrc
Size: 56KB - Virtual size: 1.9MB