f4b168df46a98222fa6947ec58734d624a2c90818c5eff3877ceb2e475d2adca

Sharing

Copy URL

Twitter E-mail

General

Target

f4b168df46a98222fa6947ec58734d624a2c90818c5eff3877ceb2e475d2adca
Size

792KB
MD5

4e5854fc7e8d37a95f3a520c817bdab0
SHA1

29028c91f5846f0fd8f9a6d6273cc23b02026319
SHA256

f4b168df46a98222fa6947ec58734d624a2c90818c5eff3877ceb2e475d2adca
SHA512

5dd07d623b89a025e139bc40a6701ea0f97e6ea71fc7f1df9e824b5f3231fc5eb1f07087597dc4c85a3539e0ade9043aefc138973007f6ad3b74833ff287414e
SSDEEP

24576:Qj9oyGEw0Kje+1tqX+F6u2QE4z5qESTxC4:Q98jD6X+v2qqEOC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4b168df46a98222fa6947ec58734d624a2c90818c5eff3877ceb2e475d2adca

Files

f4b168df46a98222fa6947ec58734d624a2c90818c5eff3877ceb2e475d2adca
.exe windows:5 windows x86 arch:x86

37d5d9e9c6c8829366c7450bc2f82d1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\bezenehiwayuz majiyer gecam\lohure.pdb

Imports

kernel32

GetSystemDefaultLangID
DebugActiveProcess
SetThreadContext
WriteConsoleInputW
GetCurrentProcess
GetNumberFormatA
ReadConsoleW
GetWindowsDirectoryA
GetCompressedFileSizeW
GetVolumeInformationA
GlobalFindAtomA
LoadLibraryW
TerminateThread
GetLocaleInfoW
ReadProcessMemory
GetConsoleAliasExesLengthW
GetConsoleAliasW
GetFileAttributesW
GetModuleFileNameW
GetACP
GetLastError
GetThreadLocale
RemoveDirectoryA
CopyFileA
VirtualAllocEx
GetNumaHighestNodeNumber
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
LocalAlloc
SetCalendarInfoW
CreateHardLinkW
AddAtomW
VirtualLock
FindFirstVolumeMountPointA
VirtualProtect
ReadConsoleInputW
DeleteTimerQueueTimer
FindNextVolumeA
CreateFileW
WriteConsoleW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetCurrentThreadId
IsDebuggerPresent
GetStdHandle
GetFileType
GetProcessHeap
ReadFile
ExitProcess
GetModuleHandleExW
HeapSize
CloseHandle
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
SetStdHandle
FlushFileBuffers
OutputDebugStringW

winhttp

WinHttpReadData

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 601KB - Virtual size: 41.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37d5d9e9c6c8829366c7450bc2f82d1d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

winhttp

Sections

.text Size: 98KB - Virtual size: 98KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 601KB - Virtual size: 41.4MB

.rsrc Size: 57KB - Virtual size: 56KB

.text
Size: 98KB - Virtual size: 98KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 601KB - Virtual size: 41.4MB

.rsrc
Size: 57KB - Virtual size: 56KB