11667a7263120d9804f51e662a5d4365ae9e3d428ce2b2520b4d2c2ab0322f9a

Sharing

Copy URL

Twitter E-mail

General

Target

11667a7263120d9804f51e662a5d4365ae9e3d428ce2b2520b4d2c2ab0322f9a
Size

1.2MB
MD5

01515f2329df3a9266b6f0ab6ec05e43
SHA1

525a83d499b3c1ddfd2c41a43e23bc45a2d9b7d0
SHA256

11667a7263120d9804f51e662a5d4365ae9e3d428ce2b2520b4d2c2ab0322f9a
SHA512

009cee8e8b19af03f258927335193de17558daa2a092a6a669bf7b94d38ec3ca76b7f3e58bc541ad2ae8a893154088a52aceb2d7ec2d3051e80db81e70752ea4
SSDEEP

12288:8wvbOnYrHzP9W4GWBL6kYN++iPW9yIRvw2MS1eElMVrr:LvMYrHzwK6kYDiPi+S1/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11667a7263120d9804f51e662a5d4365ae9e3d428ce2b2520b4d2c2ab0322f9a

Files

11667a7263120d9804f51e662a5d4365ae9e3d428ce2b2520b4d2c2ab0322f9a
.exe windows:4 windows x64 arch:x64

3f13c9efc1c96e846d07d4ba9bbc0f53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW

kernel32

AssignProcessToJobObject
CloseHandle
CreateJobObjectW
CreateProcessW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FormatMessageW
GetBinaryTypeW
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetPrivateProfileStringW
GetStartupInfoW
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryInformationJobObject
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SearchPathW
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetInformationJobObject
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx

msvcrt

__C_specific_handler
__iob_func
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fmode
_initterm
_onexit
_snwprintf_s
_vsnwprintf_s
_wcmdln
_wcsicmp
_wcsnicmp
_wfopen_s
_wgetenv_s
_wsplitpath_s
abort
calloc
exit
fclose
fflush
fprintf
fputws
fread
free
fwprintf
fwrite
isspace
iswctype
malloc
memcpy
memmove
qsort
setvbuf
signal
strlen
strncmp
vfprintf
vfwprintf_s
wcscat_s
wcschr
wcscmp
wcscpy_s
wcslen
wcsncat_s
wcsncmp
wcsncpy_s
wcspbrk
wcsrchr
wcsstr
wcstok_s

shell32

SHGetFolderPathW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 312KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3f13c9efc1c96e846d07d4ba9bbc0f53

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

Sections

.text Size: 18KB - Virtual size: 17KB

.data Size: 1024B - Virtual size: 768B

.rdata Size: 11KB - Virtual size: 11KB

.pdata Size: 1024B - Virtual size: 816B

.xdata Size: 1024B - Virtual size: 784B

.bss Size: - Virtual size: 312KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 18KB - Virtual size: 17KB

.data
Size: 1024B - Virtual size: 768B

.rdata
Size: 11KB - Virtual size: 11KB

.pdata
Size: 1024B - Virtual size: 816B

.xdata
Size: 1024B - Virtual size: 784B

.bss
Size: - Virtual size: 312KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1.2MB - Virtual size: 1.8MB