184K931TCAF42GJ3[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

184K931TCAF42GJ3.exe
Size

34.8MB
MD5

bcfd9fb2cf4f24b259f3011c9028a5b4
SHA1

ec03c109d17edc26bfb761ec100ce879e8436e7b
SHA256

8a94d4fafcbde4ebcfde37db0ba0902f6ef84518e10537e0587dcb487ec6b306
SHA512

551261fe2e7e83314ba3394ee8d7626feabf1832e01761cd45a7b46adf146170054a8a57412ed345c75f75e4559bf2f505f1b3bec72e1a393920844091d210e6
SSDEEP

786432:GgE0/pl9ej/9h34qS3lSZJ02TdW6B6bFGd9wXWnF7RbCk7:zjhilqlSZDTdPyUd9wXWntRL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
184K931TCAF42GJ3.exe

Files

184K931TCAF42GJ3.exe
.exe windows:6 windows x64 arch:x64

0b035cc7670814a4e56929c75799e525

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FreeLibrary
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

OpenClipboard

oleaut32

SysAllocString

imm32

ImmSetCompositionWindow

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateTextureFromFileInMemoryEx

iphlpapi

SetTcpEntry

wininet

InternetReadFile

ntdll

RtlVirtualUnwind

gdiplus

GdipCloneImage

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bt0
Size: - Virtual size: 21.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pFi
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.-24
Size: 34.8MB - Virtual size: 34.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b035cc7670814a4e56929c75799e525

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

imm32

d3d9

d3dx9_43

iphlpapi

wininet

ntdll

gdiplus

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 199KB

.data Size: - Virtual size: 368KB

.pdata Size: - Virtual size: 36KB

_RDATA Size: - Virtual size: 348B

.bt0 Size: - Virtual size: 21.2MB

.pFi Size: 2KB - Virtual size: 2KB

.-24 Size: 34.8MB - Virtual size: 34.8MB

.reloc Size: 512B - Virtual size: 260B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 199KB

.data
Size: - Virtual size: 368KB

.pdata
Size: - Virtual size: 36KB

_RDATA
Size: - Virtual size: 348B

.bt0
Size: - Virtual size: 21.2MB

.pFi
Size: 2KB - Virtual size: 2KB

.-24
Size: 34.8MB - Virtual size: 34.8MB

.reloc
Size: 512B - Virtual size: 260B

.rsrc
Size: 512B - Virtual size: 480B