b75f5d8dbc7a3297e907bd163406bff1fca3d7e7f28290be8075ab2cfabaf7ca

Sharing

Copy URL Twitter E-mail

General

Target

b75f5d8dbc7a3297e907bd163406bff1fca3d7e7f28290be8075ab2cfabaf7ca
Size

159KB
MD5

9db9338cdb3a853078dde15cec96dd36
SHA1

11c93d7f17bf859a994bba066d942efd9e96a26e
SHA256

b75f5d8dbc7a3297e907bd163406bff1fca3d7e7f28290be8075ab2cfabaf7ca
SHA512

7239030c62bde1fcf4cd8ff40383e633843b5f480916a2cd51b56dedcddf47eebc99b4f85d6acb6b6cf8cca4c2e726409a1e628c7b605471618e0495a3fd6954
SSDEEP

3072:kMeNbICyltIMTmxgOEEKW57Qn+xHkFRmmGlNW:kBNbICqt3TzOLK3nklw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b75f5d8dbc7a3297e907bd163406bff1fca3d7e7f28290be8075ab2cfabaf7ca

Files

b75f5d8dbc7a3297e907bd163406bff1fca3d7e7f28290be8075ab2cfabaf7ca
.exe windows:6 windows x86 arch:x86

fba487c173ab7192b3016484153a0474

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrIW
StrRChrIA

kernel32

RtlUnwind
SetEndOfFile
CreateFileW
VirtualAlloc
EnumTimeFormatsA
ReadConsoleW
WriteConsoleW
SetStdHandle
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
SetFilePointer
HeapReAlloc
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleW
TerminateProcess
GetCurrentProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
SetLastError
GetProcessHeap
SetFilePointerEx
ReadFile
GetStartupInfoW
InitOnceExecuteOnce
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
WideCharToMultiByte
GetLocaleInfoEx
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
RaiseException
GetCommandLineW
InitializeCriticalSectionAndSpinCount
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
HeapSize
IsDebuggerPresent
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType

loadperf

UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

mapi32

ord164
ord187
ord184
ord26
ord175
ord47
ord188

pdh

PdhMakeCounterPathA

rpcrt4

NdrServerMarshall
NdrUserMarshalUnmarshall
NdrByteCountPointerUnmarshall
I_RpcAllocate
RpcMgmtSetAuthorizationFn
NdrConformantStringBufferSize
IUnknown_QueryInterface_Proxy
CStdStubBuffer_AddRef

shell32

SHGetSpecialFolderPathA
DragQueryFileW
CommandLineToArgvW
SHGetDesktopFolder

ole32

HPALETTE_UserMarshal
OleCreateFromFile

oleaut32

VarI1FromDisp
SafeArrayGetRecordInfo
VarCyRound
VarUI4FromR4

wininet

HttpQueryInfoA
InternetOpenUrlW
InternetSetFilePointer
InternetSetOptionW
HttpOpenRequestA
CommitUrlCacheEntryA
InternetAutodialCallback

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fba487c173ab7192b3016484153a0474

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

loadperf

mapi32

pdh

rpcrt4

shell32

ole32

oleaut32

wininet

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 13KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 13KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 14KB - Virtual size: 14KB