2e9ff2a78936dffa2915a2c4a10e2b4ca14c304674a3eb3220a1be4aaf8d5587

General

Target

2e9ff2a78936dffa2915a2c4a10e2b4ca14c304674a3eb3220a1be4aaf8d5587
Size

790KB
MD5

4c2dc214a76df4fc5f3617f3552e0745
SHA1

e9a3145d705b62d4ff8ff10248768845afeedaa7
SHA256

2e9ff2a78936dffa2915a2c4a10e2b4ca14c304674a3eb3220a1be4aaf8d5587
SHA512

13396f7b526c66bb3ba32b10ffd377070283189c5de90dc5b69d2bf560892b982dd31d252374dc9a6f27370eda8cb0cc8c794891f35628c2f8b40cd2a28b4c25
SSDEEP

12288:b7sfWN2dFPtxplYLL8iLajoxpnghpg3RGU1:bsWILlPlYPNghpgBGU1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e9ff2a78936dffa2915a2c4a10e2b4ca14c304674a3eb3220a1be4aaf8d5587

Files

2e9ff2a78936dffa2915a2c4a10e2b4ca14c304674a3eb3220a1be4aaf8d5587
.exe windows:6 windows x64 arch:x64

a9e5e61499adfc02b1d990b239780a33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9e5e61499adfc02b1d990b239780a33

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 366KB - Virtual size: 366KB

.rdata Size: 402KB - Virtual size: 402KB

.data Size: 12KB - Virtual size: 368KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.symtab Size: 512B - Virtual size: 4B

.text
Size: 366KB - Virtual size: 366KB

.rdata
Size: 402KB - Virtual size: 402KB

.data
Size: 12KB - Virtual size: 368KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.symtab
Size: 512B - Virtual size: 4B