d5ebdf07e48f386463f3c118b5288e4e

Sharing

Copy URL Twitter E-mail

General

Target

d5ebdf07e48f386463f3c118b5288e4e
Size

181KB
MD5

d5ebdf07e48f386463f3c118b5288e4e
SHA1

646484ef79e4f9070cfe811678cf1634b0e68db0
SHA256

56d1f5f66a205ce2184c9fa9f45187516f5ed8b891a7d062bc673c3b64796a1e
SHA512

8bb38fd7369f06bf79477e1a592ce5a6d7ca8d1295971daa52bcae276a19bcc13ffbd6d8eada7691a289dff4a97c3702c333e38081b02be3508149c50084fa66
SSDEEP

3072:wUbW/ix9bQlBXM7EyHvF5/m2zqIexs83bPKrMSTWi:wUbAi7bQD87fHvFU2zUjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ebdf07e48f386463f3c118b5288e4e

Files

d5ebdf07e48f386463f3c118b5288e4e
.exe windows:4 windows x86 arch:x86

b30cef3abf37a6d1b6c2d4c1e6205531

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
CloseHandle
CompareStringA
CompareStringW
CreateEventA
CreateFileA
CreateProcessA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindResourceA
FindResourceExA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetTickCount
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadConsoleInputA
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
ScrollConsoleScreenBufferA
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleOutputCP
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
WriteFile

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen

user32

CharLowerA
CharLowerBuffA
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharUpperBuffW
GetSystemMetrics
MessageBoxA
SetActiveWindow

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

b30cef3abf37a6d1b6c2d4c1e6205531

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 99KB - Virtual size: 99KB

.data Size: 13KB - Virtual size: 13KB

.bss Size: - Virtual size: 13KB

.idata Size: 2KB - Virtual size: 2KB

.stab Size: 7KB - Virtual size: 7KB

.stabstr Size: 1KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 99KB

.data
Size: 13KB - Virtual size: 13KB

.bss
Size: - Virtual size: 13KB

.idata
Size: 2KB - Virtual size: 2KB

.stab
Size: 7KB - Virtual size: 7KB

.stabstr
Size: 1KB - Virtual size: 1KB