2859aa770411ac85ba4d5ac748a9ec7b286a8366e129502d62741c8a6c1ab53c

Sharing

Copy URL Twitter E-mail

General

Target

2859aa770411ac85ba4d5ac748a9ec7b286a8366e129502d62741c8a6c1ab53c
Size

810KB
MD5

99dab1862b7e51074c6e03466a539f0b
SHA1

3d208928791020fa632470e2ae1ab1606825b031
SHA256

2859aa770411ac85ba4d5ac748a9ec7b286a8366e129502d62741c8a6c1ab53c
SHA512

5bd0455c339b7164d4a01ac13a2a3e5ba3118326e63451591629b487c33db6e56abbb5802594e8064360fc84b4c66d67b3469e7fba5f436af847a6763cc9eefe
SSDEEP

12288:OKtQl7yzGiiOuu5UrNtIHqFp8c3eZ7APtXnK:OKtMbIHq0c3exA9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2859aa770411ac85ba4d5ac748a9ec7b286a8366e129502d62741c8a6c1ab53c

Files

2859aa770411ac85ba4d5ac748a9ec7b286a8366e129502d62741c8a6c1ab53c
.exe windows:6 windows x86 arch:x86

fa61c6a6133de14d2f9f9520b498203f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Asus\Desktop\memede\Debug\jndjjjjjdd.pdb

Imports

kernel32

GetFileAttributesA
LoadLibraryA
GetProcAddress
CreateDirectoryA
Sleep
MultiByteToWideChar
SetLastError
GetLastError
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapQueryInformation
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
HeapValidate
GetSystemInfo
GetStdHandle
WriteFile
GetFileType
WriteConsoleW
SetConsoleCtrlHandler
GetCurrentThread
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
MoveFileExW
CreateFileW

user32

EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
UnregisterClassA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
CreateWindowExA

Sections

.text
Size: 589KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa61c6a6133de14d2f9f9520b498203f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 589KB - Virtual size: 588KB

.rdata Size: 144KB - Virtual size: 144KB

.data Size: 3KB - Virtual size: 16KB

.msvcjmc Size: 512B - Virtual size: 141B

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 589KB - Virtual size: 588KB

.rdata
Size: 144KB - Virtual size: 144KB

.data
Size: 3KB - Virtual size: 16KB

.msvcjmc
Size: 512B - Virtual size: 141B

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 24KB - Virtual size: 23KB