cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b

Sharing

Copy URL

Twitter E-mail

General

Target

cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b
Size

6.8MB
MD5

d2798b9f8f9c6d1e60b9f13f1fefb9b5
SHA1

c55fa36b2985a3bbd48d5106ace682ed68a191a9
SHA256

cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b
SHA512

b794ba049524910f14e4f61544700e20689eff0f89b704352dc051e8a84ddbe3b8836b5c0e9025a4706a83e8a7f5733b135ae1ebb97d97dd52cf7fa19ec505da
SSDEEP

196608:71PlRLuvflbJT/Fr8UDJCM4D2xcBVrx00Ku:F+bTF7JCMlcVm0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b

Files

cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b
.exe windows:5 windows x86 arch:x86

763501d11af00da004d15785c929c5f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

MessageBoxA
CharUpperBuffW

gdi32

GetMapMode

advapi32

EncryptFileA

Sections

.text
Size: - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Y;~
Size: - Virtual size: 873KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gAY
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.[ E
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.FP&
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.:k5
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

763501d11af00da004d15785c929c5f5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: - Virtual size: 135KB

.rdata Size: - Virtual size: 17KB

.data Size: - Virtual size: 32KB

.Y;~ Size: - Virtual size: 873KB

.gAY Size: - Virtual size: 6KB

.htext Size: - Virtual size: 4KB

.[ E Size: - Virtual size: 3.4MB

.FP& Size: 1KB - Virtual size: 1KB

.:k5 Size: 6.8MB - Virtual size: 6.8MB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: - Virtual size: 135KB

.rdata
Size: - Virtual size: 17KB

.data
Size: - Virtual size: 32KB

.Y;~
Size: - Virtual size: 873KB

.gAY
Size: - Virtual size: 6KB

.htext
Size: - Virtual size: 4KB

.[ E
Size: - Virtual size: 3.4MB

.FP&
Size: 1KB - Virtual size: 1KB

.:k5
Size: 6.8MB - Virtual size: 6.8MB

.rsrc
Size: 18KB - Virtual size: 17KB