b5d7b0c08c220a905a78572893eb6020

Sharing

Copy URL Twitter E-mail

General

Target

b5d7b0c08c220a905a78572893eb6020
Size

23.2MB
MD5

b5d7b0c08c220a905a78572893eb6020
SHA1

f301a613807129c3ac5aeec10979a4b9d6963cad
SHA256

bf7935001b3346a0e9cfa6843f01fd2539a04b036c719b16df3fadb710163397
SHA512

e97015634681f17a5553e775d398aecdae235d285c9481e72734f7d8e68677b8ecf6eff99af4f0ffc1dc9337cae674372772677852449586930652b927b45199
SSDEEP

393216:FJSYDIn8UnwpVJS+ZGDP2xZnq0CgFFmRJSYDIn8UnwpVJS+ZGDP2xZnq0CgFFm:bJUnwDJS+cDP22aFmvJUnwDJS+cDP22x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5d7b0c08c220a905a78572893eb6020

Files

b5d7b0c08c220a905a78572893eb6020
.exe windows:5 windows x64 arch:x64

1f80f1cd81b94f85521db216e293a080

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxA

kernel32

UnhandledExceptionFilter
GetVersionExA
GetProcAddress
LoadLibraryA
GetLastError
ExpandEnvironmentStringsA
GetEnvironmentVariableA
SetEnvironmentVariableA
GetShortPathNameW
GetTempPathW
Sleep
LoadLibraryExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetCommandLineW
GetStartupInfoW
GetStdHandle
GetModuleFileNameW
HeapSize
RtlUnwindEx
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryA
GetCurrentProcessId
DeleteFileA
RemoveDirectoryA
FindNextFileA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DecodePointer
EncodePointer
SetConsoleCtrlHandler
GetModuleHandleW
ExitProcess
HeapReAlloc
GetDriveTypeW
GetFullPathNameA
GetFileAttributesA
GetCommandLineA
TerminateProcess
GetCurrentProcess
CompareStringW
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CloseHandle
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
WriteFile
SetHandleCount
DeleteCriticalSection
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LoadLibraryW
CreateFileW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetEndOfFile
GetProcessHeap
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
GetStringTypeW

ws2_32

ntohl

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l2
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_pyi_bootstrap.pyc
coordinater_last.pyc
pyi_carchive.pyc

Sharing

General

Malware Config

Signatures

Files

1f80f1cd81b94f85521db216e293a080

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

ws2_32

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 7KB - Virtual size: 47KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 1KB - Virtual size: 1KB

.l2 Size: 136KB - Virtual size: 136KB

.l2 Size: 136KB - Virtual size: 136KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 7KB - Virtual size: 47KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 1KB - Virtual size: 1KB

.l2
Size: 136KB - Virtual size: 136KB

.l2
Size: 136KB - Virtual size: 136KB