c1d1ca225e8f62b761c6d7919c032095

Sharing

Copy URL Twitter E-mail

General

Target

c1d1ca225e8f62b761c6d7919c032095
Size

81KB
MD5

c1d1ca225e8f62b761c6d7919c032095
SHA1

99f2086e79fe775bb91a2892705cb9605ec948f6
SHA256

6eb73dd3dd90bb9e70613da46907c62ab64c0cff7af051db27fc2a1ec81aab6e
SHA512

bd0fdf0db03b85f1cdff7c5686581acb0ebed1496d0926e484335335c19ee456f1eceb716b69b7d4099b217f1277efe670c1dd4c58b12009a653043d297d001b
SSDEEP

1536:L0LTNb9GwbOh8ahRHftQUN0Y52V78sMxSjp3NPEO71:Q3Nbyt19NdYysMcjRNPF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1d1ca225e8f62b761c6d7919c032095

Files

c1d1ca225e8f62b761c6d7919c032095
.exe windows:4 windows x86 arch:x86

e7f0fdac321b1fd80f2f16399bf2d0c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
VirtualFree
GetSystemTimeAsFileTime
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
CreateMutexW

olecli32

OleCreate
ErrClose
ErrShow
OleCreateFromClip
ErrQueryOpen
LeExecute
PbCreateLinkFromFile
DibChangeData
OleObjectConvert
OleQueryOutOfDate
OleQueryCreateFromClip
ConnectDlgProc
OleDelete
OleSetHostNames
OleEnumFormats
GenSetData
OleQueryType
DibGetData
OleQuerySize

msoeacct

DllGetClassObject

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rD
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qI
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EOCu
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dcm
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NvEvy
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zjru
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lxFN
Size: 512B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hwaD
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qYC
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DSCy
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7f0fdac321b1fd80f2f16399bf2d0c0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

olecli32

msoeacct

Sections

.text Size: 18KB - Virtual size: 18KB

.rD Size: 2KB - Virtual size: 1KB

.qI Size: 1KB - Virtual size: 2KB

.EOCu Size: 1KB - Virtual size: 1KB

.dcm Size: 512B - Virtual size: 240B

.NvEvy Size: 512B - Virtual size: 828B

.rdata Size: 2KB - Virtual size: 1KB

.zjru Size: 2KB - Virtual size: 2KB

.lxFN Size: 512B - Virtual size: 522B

.data Size: 44KB - Virtual size: 228KB

.hwaD Size: 1024B - Virtual size: 1KB

.qYC Size: 1KB - Virtual size: 1KB

.DSCy Size: 2KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.rD
Size: 2KB - Virtual size: 1KB

.qI
Size: 1KB - Virtual size: 2KB

.EOCu
Size: 1KB - Virtual size: 1KB

.dcm
Size: 512B - Virtual size: 240B

.NvEvy
Size: 512B - Virtual size: 828B

.rdata
Size: 2KB - Virtual size: 1KB

.zjru
Size: 2KB - Virtual size: 2KB

.lxFN
Size: 512B - Virtual size: 522B

.data
Size: 44KB - Virtual size: 228KB

.hwaD
Size: 1024B - Virtual size: 1KB

.qYC
Size: 1KB - Virtual size: 1KB

.DSCy
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB