4d2d1621ec62d18b4c9d7c4ee7faab9829a348dc2a2cb2d4dbcbff840c68bc7f

Sharing

Copy URL

Twitter E-mail

General

Target

4d2d1621ec62d18b4c9d7c4ee7faab9829a348dc2a2cb2d4dbcbff840c68bc7f
Size

76KB
MD5

eee16c0f7b0c60e2e913d0609602d52a
SHA1

f62658801f95c2e5494d0be05d284ce48fbb909e
SHA256

4d2d1621ec62d18b4c9d7c4ee7faab9829a348dc2a2cb2d4dbcbff840c68bc7f
SHA512

01d4d49343bb5880af2e9a8ba8d2179d05851ef49fd1947486d7a912a9c9f35240d321aeca2e72f95286e4b037964efd3dfb9cd6254b12eb7038c7102f1d948a
SSDEEP

768:Iw6Y768yAR3Hi1gOTZTX9oOtdnccjvbW7zNJl0EBHfK1ko7/ejL:3768jR3CWOTZTNfHdjDWnNJlBHakZjL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d2d1621ec62d18b4c9d7c4ee7faab9829a348dc2a2cb2d4dbcbff840c68bc7f

Files

4d2d1621ec62d18b4c9d7c4ee7faab9829a348dc2a2cb2d4dbcbff840c68bc7f
.exe windows:4 windows x64 arch:x64

a3ba2db034214594fce3594442b966b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessW
ExitProcess
FormatMessageW
FreeLibrary
GetBinaryTypeW
GetCommandLineW
GetConsoleOutputCP
GetExitCodeProcess
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStdHandle
GetSystemWow64DirectoryW
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
LoadLibraryExW
LocalFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile

ole32

OleInitialize
OleUninitialize

ucrtbase

__acrt_iob_func
__p___argc
__p___wargv
__stdio_common_vsprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
_strdup
exit
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen
towlower
wcscat
wcscpy
wcslen

user32

LoadStringW

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 352B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a3ba2db034214594fce3594442b966b3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

ucrtbase

user32

Sections

.text Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 64B

.rdata Size: 4KB - Virtual size: 688B

.pdata Size: 4KB - Virtual size: 240B

.xdata Size: 4KB - Virtual size: 272B

.bss Size: - Virtual size: 352B

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 44KB - Virtual size: 40KB

.text
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 64B

.rdata
Size: 4KB - Virtual size: 688B

.pdata
Size: 4KB - Virtual size: 240B

.xdata
Size: 4KB - Virtual size: 272B

.bss
Size: - Virtual size: 352B

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 44KB - Virtual size: 40KB