921cc1f1bf46300a714facc5d9da9a403ce48224f50e18754d01004bfa3f842a

Sharing

Copy URL Twitter E-mail

General

Target

921cc1f1bf46300a714facc5d9da9a403ce48224f50e18754d01004bfa3f842a
Size

1.6MB
MD5

47cef2a0c36a50c6da1f45b11397eb3e
SHA1

5cb71186acf8fa78cf433f6edd1f1ba453a57e3b
SHA256

921cc1f1bf46300a714facc5d9da9a403ce48224f50e18754d01004bfa3f842a
SHA512

71813a7c56e792618c91f8c1d9f61fbca679ca789d07cdd085300db4c3325ae6ebab9e282ec854bf6f4f7e4ed8b88b15d459047f226019db2e21e96b1aeeb78a
SSDEEP

24576:FVczCCh6WpwFYtVJou6zj6FQvY5UFgMLBaOzX:/QCw6BFrcL5OgKBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
921cc1f1bf46300a714facc5d9da9a403ce48224f50e18754d01004bfa3f842a

Files

921cc1f1bf46300a714facc5d9da9a403ce48224f50e18754d01004bfa3f842a
.exe windows:6 windows x64 arch:x64

c2d457ad8ac36fc9f18d45bffcd450c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler

Sections

.text
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 861KB - Virtual size: 861KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 607KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2d457ad8ac36fc9f18d45bffcd450c2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 727KB - Virtual size: 727KB

.rdata Size: 861KB - Virtual size: 861KB

.data Size: 60KB - Virtual size: 607KB

.pdata Size: 20KB - Virtual size: 20KB

.xdata Size: 512B - Virtual size: 180B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 15KB - Virtual size: 15KB

.symtab Size: 512B - Virtual size: 4B

.text
Size: 727KB - Virtual size: 727KB

.rdata
Size: 861KB - Virtual size: 861KB

.data
Size: 60KB - Virtual size: 607KB

.pdata
Size: 20KB - Virtual size: 20KB

.xdata
Size: 512B - Virtual size: 180B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 15KB - Virtual size: 15KB

.symtab
Size: 512B - Virtual size: 4B