54b2b0607b102afc3900f5e78be03a57257751e0e56c2bee859a5227b150a91a

Sharing

Copy URL Twitter E-mail

General

Target

54b2b0607b102afc3900f5e78be03a57257751e0e56c2bee859a5227b150a91a
Size

329KB
MD5

8eadfa4dc37a3f2ad6b4b0ae20650690
SHA1

e2be329fdc37e14016ab89eaf6cc289a95827e89
SHA256

54b2b0607b102afc3900f5e78be03a57257751e0e56c2bee859a5227b150a91a
SHA512

dec097921bfe070b53c11e9361f2e8cf9a6037331bd6c0556b98e7c591ddda782084749fa6871d745c743728277b94acd6dda9e4c18ab04999bf873caf7e1011
SSDEEP

6144:BBOxxTQd2XA+3NKEHl9XVyxdZRzDIfheJK:BoCKA+NKEF9lybI0JK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54b2b0607b102afc3900f5e78be03a57257751e0e56c2bee859a5227b150a91a

Files

54b2b0607b102afc3900f5e78be03a57257751e0e56c2bee859a5227b150a91a
.exe windows:5 windows x86 arch:x86

7728fdfee954e106d39411e9e7e8ccc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
GetCommState
InterlockedDecrement
WaitForSingleObject
SetConsoleScreenBufferSize
GetModuleHandleW
GetProcessHeap
GetSystemTimes
GlobalAlloc
GetLocaleInfoW
lstrcpynW
IsBadWritePtr
SetCurrentDirectoryA
FindFirstFileExA
GetCurrentDirectoryW
SetLastError
GetProcAddress
GetLongPathNameA
BuildCommDCBW
LoadLibraryA
WriteConsoleA
SetFileApisToANSI
FindNextChangeNotification
OpenJobObjectW
FindAtomA
FreeEnvironmentStringsW
EnumDateFormatsW
GetSystemTime
SetFileAttributesW
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 38.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7728fdfee954e106d39411e9e7e8ccc0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 208KB - Virtual size: 207KB

.data Size: 10KB - Virtual size: 38.7MB

.rsrc Size: 66KB - Virtual size: 66KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 208KB - Virtual size: 207KB

.data
Size: 10KB - Virtual size: 38.7MB

.rsrc
Size: 66KB - Virtual size: 66KB