a344b7288feabf6875f02ce7c71bebb4

Sharing

Copy URL Twitter E-mail

General

Target

a344b7288feabf6875f02ce7c71bebb4
Size

114KB
MD5

a344b7288feabf6875f02ce7c71bebb4
SHA1

f7dd721549757cd9be6945667c99cda8ddf4cda1
SHA256

2f0b0e465d0c8715d867846d784f339118c86fe3c9642ec968826c2f6172b29c
SHA512

35d2c556c553f7fee3457a5b4f1b0e7216d96b3a4321516b881f718323a699a749ed7498ecd94577545d633327f541515ea4d2a59d495e86e4b68fda9d43df2a
SSDEEP

1536:X2UMA0MMxoRdRwK/uJ+ONjsP5kF+dAervxxDYRUOpp34d6U9r4qnP5db6NwXDZrP:mUMdM5CptScYNrvxGRIdJf6NwXpP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a344b7288feabf6875f02ce7c71bebb4

Files

a344b7288feabf6875f02ce7c71bebb4
.exe windows:5 windows x86 arch:x86

38b1a6054c51e84d5b5907812436ef80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

kernel32

CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetCurrentProcessId
Sleep
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetFileType
CreateFileA
HeapFree
GetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlUnwind
WideCharToMultiByte
IsProcessorFeaturePresent
WriteFile
GetConsoleCP
GetConsoleMode
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetDriveTypeW
SetStdHandle
SetFilePointer
SetEndOfFile
HeapAlloc
GetProcessHeap
MultiByteToWideChar
ReadFile
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
HeapReAlloc
GetStringTypeW
CreateFileW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38b1a6054c51e84d5b5907812436ef80

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 51KB - Virtual size: 59KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 51KB - Virtual size: 59KB

.reloc
Size: 4KB - Virtual size: 3KB