94af02f4b79f9ca0162cf5bf4588b1a25b2513d0bbf0cad5649e9736a733378d

Sharing

Copy URL Twitter E-mail

General

Target

94af02f4b79f9ca0162cf5bf4588b1a25b2513d0bbf0cad5649e9736a733378d
Size

4.9MB
MD5

524650fc32a6ddd551807d0ce33b2615
SHA1

8bd74795e21283598e69b009b4f5155845c7bfd5
SHA256

94af02f4b79f9ca0162cf5bf4588b1a25b2513d0bbf0cad5649e9736a733378d
SHA512

a4c614b2573fb00f772cab65baecad847faec22460aaaacb5368df09a073df339e4ee1a7e907d2284bba97394cfd50fff574063ef786957e84641aa30eb8bfb2
SSDEEP

49152:hzyZzuHnCT1m0TvakIJbigaM1TG9PmQWGA252a+XQyJR5FmEXw0/TpRDJDlY:KQQ1m0NboYLn+FTuE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94af02f4b79f9ca0162cf5bf4588b1a25b2513d0bbf0cad5649e9736a733378d

Files

94af02f4b79f9ca0162cf5bf4588b1a25b2513d0bbf0cad5649e9736a733378d
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 461KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 677B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.data Size: 38KB - Virtual size: 38KB

.rdata Size: 461KB - Virtual size: 460KB

.pdata Size: 98KB - Virtual size: 97KB

.xdata Size: 136KB - Virtual size: 136KB

.bss Size: - Virtual size: 100KB

.edata Size: 1024B - Virtual size: 677B

.idata Size: 16KB - Virtual size: 16KB

.CRT Size: 512B - Virtual size: 112B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 12KB - Virtual size: 12KB

/4 Size: 512B - Virtual size: 16B

.text
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 38KB - Virtual size: 38KB

.rdata
Size: 461KB - Virtual size: 460KB

.pdata
Size: 98KB - Virtual size: 97KB

.xdata
Size: 136KB - Virtual size: 136KB

.bss
Size: - Virtual size: 100KB

.edata
Size: 1024B - Virtual size: 677B

.idata
Size: 16KB - Virtual size: 16KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 12KB - Virtual size: 12KB

/4
Size: 512B - Virtual size: 16B