ad1b98e691fffb516f276887361ef718

Sharing

Copy URL Twitter E-mail

General

Target

ad1b98e691fffb516f276887361ef718
Size

260KB
MD5

ad1b98e691fffb516f276887361ef718
SHA1

00e6bd7d9ac8cdb7f20c145cca57005d01320dd1
SHA256

6240947b245e0b06d0e970d40743c72b74f1322783b5883c00d160758679ab6f
SHA512

bca57f12ad64e54fe480c7931b9455a2fcac561bad10d396039b0fb222f7e4349fc32a7abe35718bc7f3e2ef853b85b461d94dff47fbb198bbde85a771f835e0
SSDEEP

6144:bes9U1XqHD0p6IMwTd2/o2jN2qYuYvnRdGR:bD9zHDwqvjNpQeR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad1b98e691fffb516f276887361ef718

Files

ad1b98e691fffb516f276887361ef718
.exe windows:5 windows x86 arch:x86

59b16990a8631e97ab6934c097b171e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

CloseHandle
GetTickCount
CopyFileA
SetFileTime
ReadFile
LocalAlloc
GetFileSize
WriteFile
SetFilePointer
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetTempPathA
DeleteFileA
LocalFree
WaitForSingleObject
Sleep
WinExec
GetProcessHeap
SetEndOfFile
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetModuleHandleW
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

PostMessageA
LoadStringA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59b16990a8631e97ab6934c097b171e1

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

shell32

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 7KB - Virtual size: 20KB

.rsrc Size: 150KB - Virtual size: 149KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 7KB - Virtual size: 20KB

.rsrc
Size: 150KB - Virtual size: 149KB