90fbd7a696818a8d9c7314bdd80b5e6aa5f5a399f34297d1c5e97a93b06c8fea

Sharing

Copy URL Twitter E-mail

General

Target

90fbd7a696818a8d9c7314bdd80b5e6aa5f5a399f34297d1c5e97a93b06c8fea
Size

5.8MB
MD5

470e06edda960db3a2641c4420ecff83
SHA1

364e93452aba9e613ca513d64e370a68337e42dd
SHA256

90fbd7a696818a8d9c7314bdd80b5e6aa5f5a399f34297d1c5e97a93b06c8fea
SHA512

2dba2cbe15ebc1a1e3cbf0b532e6ee94492b55aa8d03a176b28fc30c150d6942381cea0c24adadae2a94c173cae4332bcdc38ae789fb2438937295cbf60983dd
SSDEEP

98304:sKCbq1wqSXfrfxeFNXK3nssC3dQDzzTHRPuJckURn1xLyMSOdz5q6On:sPlvrfxe/KcsC3d4nHRmyk41FyNOBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90fbd7a696818a8d9c7314bdd80b5e6aa5f5a399f34297d1c5e97a93b06c8fea

Files

90fbd7a696818a8d9c7314bdd80b5e6aa5f5a399f34297d1c5e97a93b06c8fea
.exe windows:5 windows x86 arch:x86

e9cfc6835a62d9fdc999ac9eb90ee2fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

oleaut32

SysAllocStringLen

user32

MessageBoxA
CharUpperBuffW

Sections

.text
Size: - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ibz
Size: - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Wk7
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.+%X
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.}rv
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9cfc6835a62d9fdc999ac9eb90ee2fd

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: - Virtual size: 79KB

.data Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 337KB

.bss Size: - Virtual size: 9KB

.CRT Size: - Virtual size: 12B

.idata Size: - Virtual size: 2KB

.ibz Size: - Virtual size: 496B

.htext Size: - Virtual size: 8KB

.Wk7 Size: - Virtual size: 3.0MB

.+%X Size: 1KB - Virtual size: 1KB

.}rv Size: 5.8MB - Virtual size: 5.8MB

.rsrc Size: 512B - Virtual size: 496B

.text
Size: - Virtual size: 79KB

.data
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 337KB

.bss
Size: - Virtual size: 9KB

.CRT
Size: - Virtual size: 12B

.idata
Size: - Virtual size: 2KB

.ibz
Size: - Virtual size: 496B

.htext
Size: - Virtual size: 8KB

.Wk7
Size: - Virtual size: 3.0MB

.+%X
Size: 1KB - Virtual size: 1KB

.}rv
Size: 5.8MB - Virtual size: 5.8MB

.rsrc
Size: 512B - Virtual size: 496B