2d5072c5c7bda487c8c8f7875877046b06a977d73409b019ad8549f546a6053f

Sharing

Copy URL Twitter E-mail

General

Target

2d5072c5c7bda487c8c8f7875877046b06a977d73409b019ad8549f546a6053f
Size

64KB
MD5

8b7b602e05604f61685a2cbfc16313af
SHA1

a805f5aa0a564a5c7609514c04e99745e0026790
SHA256

2d5072c5c7bda487c8c8f7875877046b06a977d73409b019ad8549f546a6053f
SHA512

c385da3873de81525389d327b215f61fb61a532e9f5c6c1457529645d4d8b99784d67a2597d2dec5722f387f36435d0205e0242f595ee43c0eda547abf343bf1
SSDEEP

768:lat+b6+7jKYRHajfA2Qh7Mn/RmVg9pZPtbCOaSD5zpo:N6udR6fJmV0V5zp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d5072c5c7bda487c8c8f7875877046b06a977d73409b019ad8549f546a6053f

Files

2d5072c5c7bda487c8c8f7875877046b06a977d73409b019ad8549f546a6053f
.exe windows:5 windows x86 arch:x86

3e40cd46246c51d40dfc3535d5a4ebb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
FreeLibrary
HeapAlloc
HeapFree
WaitForSingleObject
VirtualFree
GetProcessHeap
IsBadReadPtr
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
CreateFileA
VirtualProtect
CloseHandle
CreateThread
lstrlenA
WriteFile
lstrcatA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
GetConsoleMode
GetConsoleCP
CreateMutexA
GetLocaleInfoA
GetStringTypeW
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
VirtualQuery

wininet

HttpQueryInfoA
InternetConnectA
InternetCrackUrlA
InternetReadFile
InternetQueryOptionA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e40cd46246c51d40dfc3535d5a4ebb5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 64KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 64KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB