3d2fb9c7301d352d018f3ae2e37f501ceb28e049e8313c5d7f206ad11096541e

Sharing

Copy URL Twitter E-mail

General

Target

3d2fb9c7301d352d018f3ae2e37f501ceb28e049e8313c5d7f206ad11096541e
Size

5.8MB
MD5

e2a88a5d1cd78b39fc8ea1be903703e5
SHA1

5e8bd0b9deac38bb693d018d25ae7c2381cc2d04
SHA256

3d2fb9c7301d352d018f3ae2e37f501ceb28e049e8313c5d7f206ad11096541e
SHA512

30dd625dd44047dc61a562cc4386aa66d7dbeaa0d477427131494885c5483ff65aef231ff13b11f63a0a5d5838a88de17221278413b44536ddb5556c35753d9b
SSDEEP

98304:secGiLinHBgCjXY5Z0YKGFBvTfK/39/yv5SBeHFUC0S60oCoqAjwkXFyKpZISg:sh2Hvs5dKyQKRPT60oBqkLo+8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d2fb9c7301d352d018f3ae2e37f501ceb28e049e8313c5d7f206ad11096541e

Files

3d2fb9c7301d352d018f3ae2e37f501ceb28e049e8313c5d7f206ad11096541e
.exe windows:5 windows x86 arch:x86

e9cfc6835a62d9fdc999ac9eb90ee2fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

oleaut32

SysAllocStringLen

user32

MessageBoxA
CharUpperBuffW

Sections

.text
Size: - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fpu
Size: - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zk=
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.NS;
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.8G9
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9cfc6835a62d9fdc999ac9eb90ee2fd

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: - Virtual size: 79KB

.data Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 337KB

.bss Size: - Virtual size: 9KB

.CRT Size: - Virtual size: 12B

.idata Size: - Virtual size: 2KB

.fpu Size: - Virtual size: 496B

.htext Size: - Virtual size: 8KB

.zk= Size: - Virtual size: 3.0MB

.NS; Size: 1KB - Virtual size: 1KB

.8G9 Size: 5.8MB - Virtual size: 5.8MB

.rsrc Size: 512B - Virtual size: 496B

.text
Size: - Virtual size: 79KB

.data
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 337KB

.bss
Size: - Virtual size: 9KB

.CRT
Size: - Virtual size: 12B

.idata
Size: - Virtual size: 2KB

.fpu
Size: - Virtual size: 496B

.htext
Size: - Virtual size: 8KB

.zk=
Size: - Virtual size: 3.0MB

.NS;
Size: 1KB - Virtual size: 1KB

.8G9
Size: 5.8MB - Virtual size: 5.8MB

.rsrc
Size: 512B - Virtual size: 496B