b70db81ffabfcfeb6050984e51fe960f

Sharing

Copy URL Twitter E-mail

General

Target

b70db81ffabfcfeb6050984e51fe960f
Size

543KB
MD5

b70db81ffabfcfeb6050984e51fe960f
SHA1

fe9b5e05546b9a4c2f0771a7cbcc549f577c4107
SHA256

7b4027f956893f61c070ba3c414a4d539ba858b311d6bf0b7e313fd3528600d3
SHA512

91d8c8e86ff1d30b363c4ad06e13c2f31b3bd0c09429649bdd590020f5abc19df6e45a0f4901ad4a843f56af278e76dd87d3133f7c12c75c35bfc735541678f2
SSDEEP

12288:S9u7wzNSQjqcjp0MEgczlpDcy65iG3viMjVAos16psML:S9u7w9qMp0H4/IG//m1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70db81ffabfcfeb6050984e51fe960f

Files

b70db81ffabfcfeb6050984e51fe960f
.exe windows:4 windows x86 arch:x86

3d66270a7307e39f0a0b2c10ec7133c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineW
GetComputerNameA
GetCommandLineA
CreateFileA
GetComputerNameW
GetModuleHandleW
CreateFileW
GetACP

user32

GetDC

advapi32

GetUserNameW

shell32

SHGetSettings

gdi32

GetPixel

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_controlfp
_except_handler3
_exit
_initterm
exit

Sections

CODE
Size: 1024B - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1024B - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 1024B - Virtual size: 944KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3d66270a7307e39f0a0b2c10ec7133c0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

gdi32

msvcrt

Sections

CODE Size: 1024B - Virtual size: 156KB

DATA Size: 1024B - Virtual size: 484KB

.text Size: 8KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 4KB

.idata Size: 1024B - Virtual size: 4KB

.sdata Size: 1024B - Virtual size: 944KB

.rsrc Size: 7KB - Virtual size: 36KB

.data Size: 6KB - Virtual size: 8KB

.adata Size: 512KB - Virtual size: 512KB

CODE
Size: 1024B - Virtual size: 156KB

DATA
Size: 1024B - Virtual size: 484KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 4KB

.idata
Size: 1024B - Virtual size: 4KB

.sdata
Size: 1024B - Virtual size: 944KB

.rsrc
Size: 7KB - Virtual size: 36KB

.data
Size: 6KB - Virtual size: 8KB

.adata
Size: 512KB - Virtual size: 512KB