c0cf824bceba7a8b7f6a8b00011849eba2c47f1c5d243ea58810c8e8c35d90eb

Sharing

Copy URL Twitter E-mail

General

Target

c0cf824bceba7a8b7f6a8b00011849eba2c47f1c5d243ea58810c8e8c35d90eb
Size

6.6MB
MD5

5f20e6b508c358aedb6c494499351826
SHA1

e4280c14344a2fc3e2b9d4e1ae6f0d837b1bfc79
SHA256

c0cf824bceba7a8b7f6a8b00011849eba2c47f1c5d243ea58810c8e8c35d90eb
SHA512

f1c6b80b9dd1b1a67b74da5e7d1186dca5fe02c597b6a1291d64d7d4913be5a1f509deed76bb9d85e2ccf8b3628050f9b7f177cdd85d5c2c279ed27b0f56d81e
SSDEEP

196608:AUTFNeJW3VnFB8MTQSf0x8q09+eYQKHBa:AUhNe018Mkpx819qQKk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0cf824bceba7a8b7f6a8b00011849eba2c47f1c5d243ea58810c8e8c35d90eb

Files

c0cf824bceba7a8b7f6a8b00011849eba2c47f1c5d243ea58810c8e8c35d90eb
.exe windows:5 windows x86 arch:x86

3abc034d839842696534b44433da45b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

kernel32

WideCharToMultiByte
OpenProcess
CreateToolhelp32Snapshot
Process32First
GetModuleFileNameA
Sleep
LocalAlloc
CreateEventA
CreateThread
WaitForSingleObject
WriteFile
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
SetFilePointer
SetStdHandle
Process32Next
CreateFileW
WriteConsoleW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadLibraryW
GetStringTypeW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
GetCommandLineA
HeapSetInformation
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetStdHandle
GetModuleFileNameW
GetStartupInfoW
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
QueryServiceConfigA
EnumServicesStatusA
DeleteService
QueryServiceStatus
ControlService
OpenServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
CreateProcessAsUserA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
StartServiceCtrlDispatcherA

shlwapi

PathFileExistsA

psapi

EnumProcessModules
EnumProcesses
GetModuleFileNameExA

Sections

.text
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lcs0
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lcs1
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lcs2
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3abc034d839842696534b44433da45b2

Headers

DLL Characteristics

File Characteristics

Imports

userenv

kernel32

advapi32

shlwapi

psapi

Sections

.text Size: - Virtual size: 42KB

.rdata Size: - Virtual size: 14KB

.data Size: - Virtual size: 11KB

.lcs0 Size: - Virtual size: 3.1MB

.lcs1 Size: 1024B - Virtual size: 832B

.lcs2 Size: 6.6MB - Virtual size: 6.6MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 42KB

.rdata
Size: - Virtual size: 14KB

.data
Size: - Virtual size: 11KB

.lcs0
Size: - Virtual size: 3.1MB

.lcs1
Size: 1024B - Virtual size: 832B

.lcs2
Size: 6.6MB - Virtual size: 6.6MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB