ad11f5e7b6814512829785896c370416c0f7ce733674c2491cb7ac0dd4dce5cb

Sharing

Copy URL

Twitter E-mail

General

Target

ad11f5e7b6814512829785896c370416c0f7ce733674c2491cb7ac0dd4dce5cb
Size

382KB
MD5

d53e181c12299c4011d0073b9af8cee2
SHA1

b6e03d6b6a2955e25cd61730820b88c57628bcf7
SHA256

ad11f5e7b6814512829785896c370416c0f7ce733674c2491cb7ac0dd4dce5cb
SHA512

62cfe628434da28ca09c53b829200b6d37ed57279efefd34a6e28614466c159d608326a1635d403c65fd3ae0e6ee69a378f429e115e63c6625aa52462097a4b1
SSDEEP

6144:L0NTKE3CDWHhQgoFZHaJtrzQr792AiXQvdUodm7iKMceJK2o:L0NGMCaXoFdAFzQrJviXq3w7IJK2o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad11f5e7b6814512829785896c370416c0f7ce733674c2491cb7ac0dd4dce5cb

Files

ad11f5e7b6814512829785896c370416c0f7ce733674c2491cb7ac0dd4dce5cb
.exe windows:5 windows x86 arch:x86

69d7ebcb409fed673321a1cb32d765bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
GetCommState
InterlockedDecrement
WaitForSingleObject
SetConsoleScreenBufferSize
GetModuleHandleW
GetProcessHeap
GetSystemTimes
GlobalAlloc
lstrcpynW
IsBadWritePtr
CompareStringW
SetCurrentDirectoryA
FindFirstFileExA
GetCurrentDirectoryW
SetLastError
GetProcAddress
GetLongPathNameA
SetFileAttributesA
BuildCommDCBW
LoadLibraryA
WriteConsoleA
SetFileApisToANSI
FindNextChangeNotification
OpenJobObjectW
FindAtomA
FreeEnvironmentStringsW
EnumDateFormatsW
GetSystemTime
GetLastError
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
ReadFile
HeapSize
CreateFileA
CloseHandle

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 38.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69d7ebcb409fed673321a1cb32d765bc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 260KB - Virtual size: 260KB

.data Size: 10KB - Virtual size: 38.7MB

.rsrc Size: 67KB - Virtual size: 67KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 260KB - Virtual size: 260KB

.data
Size: 10KB - Virtual size: 38.7MB

.rsrc
Size: 67KB - Virtual size: 67KB