cd236b1fc003f3aaaa3e55c45a36727f

Sharing

Copy URL Twitter E-mail

General

Target

cd236b1fc003f3aaaa3e55c45a36727f
Size

281KB
MD5

cd236b1fc003f3aaaa3e55c45a36727f
SHA1

1952abc0e2a7a4b0eb5659dacb835b0026dd5426
SHA256

1a8f713daa2a519a533ee9a538eda8b4bb25ecf90728b2037dff7c6c5338e04a
SHA512

b28e5216a2fd081fd96b5ce362d4197747bbfe17898b2eb6f77995901ba8cf39d2f105805fdf087b4dc078cd0aefebb7b5be26612d6ecad07110bd5d49a51f3a
SSDEEP

6144:h1nKfxG7YdgbHjGxmsHGGoADhvSeBDkP7MYYIVoOAOKQthS7C7V:h1nKfxG7Ydgb6QsHGGFbBDvYFAQW7Cx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd236b1fc003f3aaaa3e55c45a36727f

Files

cd236b1fc003f3aaaa3e55c45a36727f
.exe windows:5 windows

99f110dfa13f88e8993c18e43e2d8c35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
GetLastError
Process32NextW
CreateFileA
Process32FirstW
CloseHandle
LoadLibraryW
CreateWaitableTimerA
OpenProcess
GetModuleHandleW
FreeLibrary
WriteConsoleW
HeapSize
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetVersionExW
WaitForSingleObject
CreateMutexW
TerminateProcess
DeviceIoControl
GetProcAddress
SetWaitableTimer
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
LoadLibraryExW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
ReadFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetProcessHeap
FindClose
SetEndOfFile

user32

TranslateMessage
PeekMessageW
DispatchMessageW
MessageBoxA

advapi32

CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW

wininet

InternetSetOptionA
InternetCloseHandle
HttpOpenRequestA
InternetQueryDataAvailable
HttpQueryInfoA
HttpAddRequestHeadersA
InternetOpenA
HttpSendRequestA
InternetConnectA
InternetReadFile
InternetSetOptionW
InternetCrackUrlA

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99f110dfa13f88e8993c18e43e2d8c35

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 68KB - Virtual size: 68KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 68KB - Virtual size: 68KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 11KB - Virtual size: 10KB