080988e510a463c10b4b9298070701d16a7e92589a064b690ed18b364e9c57a9

Sharing

Copy URL

Twitter E-mail

General

Target

080988e510a463c10b4b9298070701d16a7e92589a064b690ed18b364e9c57a9
Size

452KB
MD5

3e976b90e48e8991c01d99674dbd359d
SHA1

5eafcb5e3fb49b22c11322ac652f4efe4badcc1f
SHA256

080988e510a463c10b4b9298070701d16a7e92589a064b690ed18b364e9c57a9
SHA512

0ab1816b8d09f640d5299cf3e4d0fd0c30275a8f19a9563255e8738f15b2f07c50115c9c9eab470fa532150c89fe8c8f1778c4d43aa04736ff0d1c157ba29217
SSDEEP

6144:01fnu4ll8K8S17n0vfYqtvRV/ynbG6JMpKoQ/apBmnTeM:01fu438K51kfYqt7/ybG6E4wBqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080988e510a463c10b4b9298070701d16a7e92589a064b690ed18b364e9c57a9

Files

080988e510a463c10b4b9298070701d16a7e92589a064b690ed18b364e9c57a9
.exe windows:5 windows x86 arch:x86

835e7ff9bbff8c440158acd0a81735f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\derijecice.pdb

Imports

kernel32

CreateFileA
GetConsoleAliasExesA
SetComputerNameExA
GetConsoleAliasExesLengthA
InterlockedIncrement
ReadConsoleA
GetConsoleAliasA
AddConsoleAliasW
GetFileAttributesExA
GetTickCount
GenerateConsoleCtrlEvent
FindNextVolumeMountPointA
GetConsoleTitleA
ReadConsoleW
GlobalAlloc
GlobalFindAtomA
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
ReadFile
GetTempFileNameW
CreateDirectoryA
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
RemoveDirectoryA
SetStdHandle
LoadLibraryA
WriteConsoleA
SetCalendarInfoW
GetNumberFormatW
GetVersionExA
GetVolumeInformationW
CloseHandle
GetModuleFileNameW
GetComputerNameA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
HeapFree
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

GetAltTabInfoA
SetMenu
LoadKeyboardLayoutA
CharUpperBuffA

gdi32

StretchDIBits

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 22.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

835e7ff9bbff8c440158acd0a81735f5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 40KB - Virtual size: 22.0MB

.rsrc Size: 65KB - Virtual size: 64KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 40KB - Virtual size: 22.0MB

.rsrc
Size: 65KB - Virtual size: 64KB