9b13b61e993d942c882918fda529036b

Sharing

Copy URL Twitter E-mail

General

Target

9b13b61e993d942c882918fda529036b
Size

261KB
MD5

9b13b61e993d942c882918fda529036b
SHA1

56b1157eae28c0514d2244f1738239745311b79d
SHA256

2ffce10e16478c91470bb5617a3bdb1bff59a5a3e8fd20448d5f9c1e95321052
SHA512

669acfa703f185249a884121d5a330e5666df70c76bbb572ec9c9dac3d68632f201bd1d6fd2423b24bb15b40024444688f606812e925fd510d144914eee72015
SSDEEP

6144:BsMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:BDPSZrEtPU4Nmn08r2QnjR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b13b61e993d942c882918fda529036b

Files

9b13b61e993d942c882918fda529036b
.exe windows:4 windows x86 arch:x86

0e1c4792f15b09efa9287ef89fc4944a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
SystemTimeToFileTime
GetSystemTime
GetLastError
GetLocaleInfoW
GetVersion
InitializeCriticalSection
ExitProcess
GetCurrentProcess
GetCurrentThreadId
TlsAlloc
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
IsBadWritePtr
FatalAppExitA
GetStartupInfoA
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
Sleep
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetUserDefaultLCID
BeginUpdateResourceW
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHCreateDirectoryExA
SHGetFolderPathA

msasn1

ASN1BEREncCheck
ASN1CEREncMultibyteString
ASN1BERDecBitString2
ASN1BEREncGeneralizedTime
ASN1DecRealloc
ASN1BERDecUTCTime
ASN1BEREncFlush
ASN1BEREncEndOfContents
ASN1BERDecDouble
ASN1BEREncChar32String
ASN1BERDecOctetString
ASN1BEREncOpenType
ASN1_CloseModule
ASN1ztchar32string_free
ASN1open_free
ASN1_Encode
ASN1_CloseDecoder

t2embed

TTIsEmbeddingEnabledForFacename

Sections

CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sQvasT
Size: 5KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ZY
Size: 2KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sHJUwl
Size: 4KB - Virtual size: 971KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 90KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WoXhXU
Size: 512B - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LqTVGi
Size: 1KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 129KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FOAu
Size: 4KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e1c4792f15b09efa9287ef89fc4944a

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

msasn1

t2embed

Sections

CODE Size: 2KB - Virtual size: 2KB

.sQvasT Size: 5KB - Virtual size: 48KB

.text Size: 11KB - Virtual size: 10KB

.ZY Size: 2KB - Virtual size: 313KB

.rdata Size: 2KB - Virtual size: 46KB

.sHJUwl Size: 4KB - Virtual size: 971KB

.edata Size: 90KB - Virtual size: 130KB

.WoXhXU Size: 512B - Virtual size: 94KB

.data Size: 6KB - Virtual size: 268KB

.LqTVGi Size: 1KB - Virtual size: 188KB

.edata Size: 129KB - Virtual size: 156KB

.FOAu Size: 4KB - Virtual size: 268KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 2KB - Virtual size: 2KB

.sQvasT
Size: 5KB - Virtual size: 48KB

.text
Size: 11KB - Virtual size: 10KB

.ZY
Size: 2KB - Virtual size: 313KB

.rdata
Size: 2KB - Virtual size: 46KB

.sHJUwl
Size: 4KB - Virtual size: 971KB

.edata
Size: 90KB - Virtual size: 130KB

.WoXhXU
Size: 512B - Virtual size: 94KB

.data
Size: 6KB - Virtual size: 268KB

.LqTVGi
Size: 1KB - Virtual size: 188KB

.edata
Size: 129KB - Virtual size: 156KB

.FOAu
Size: 4KB - Virtual size: 268KB

.rsrc
Size: 1KB - Virtual size: 1KB