768ae0f17943064669d347baf61eef12051cde098e2d0c9a2d14b0a846fc016b

Sharing

Copy URL Twitter E-mail

General

Target

768ae0f17943064669d347baf61eef12051cde098e2d0c9a2d14b0a846fc016b
Size

990KB
MD5

37f222e7094555c0fab9f6b587bafd18
SHA1

bc05f4c2ee1ef5794965b5140cd61f59fc05747d
SHA256

768ae0f17943064669d347baf61eef12051cde098e2d0c9a2d14b0a846fc016b
SHA512

f606dfa07c04ac7062f8149f12acc3b7aeb04ef73a4f12014bca7402a05d77e317b616c4fad486debb0fc2a40d6b641f62b23d616cf14532f461c69150c5f990
SSDEEP

12288:WQZhWTs8MctUS5NWCiYivsk9eEHzmc1OHMfqoh1uChhhw3i8QYV:z87PHiYivPVIzoh1uChhhw3i8TV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
768ae0f17943064669d347baf61eef12051cde098e2d0c9a2d14b0a846fc016b

Files

768ae0f17943064669d347baf61eef12051cde098e2d0c9a2d14b0a846fc016b
.exe windows:5 windows x86 arch:x86

7b7db5c5094e859626b92e55966ed759

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
?terminate@@YAXXZ
_controlfp_s
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
vsprintf_s
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
__FrameUnwindFilter
_encoded_null
abs
_exit
_cexit
__getmainargs
_amsg_exit
_invoke_watson
memset

kernel32

GetTickCount
GetPrivateProfileStringA
WinExec
WritePrivateProfileStringA
GetPrivateProfileIntA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetEnvironmentVariableA

slnetdb

SL_init
SL_quit

user32

SendMessageA
FindWindowA

shell32

ShellExecuteA

msvcm90

?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z

mscoree

_CorExeMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 857KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b7db5c5094e859626b92e55966ed759

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

slnetdb

user32

shell32

msvcm90

mscoree

Sections

.text Size: 98KB - Virtual size: 97KB

.rdata Size: 857KB - Virtual size: 856KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 30KB - Virtual size: 29KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 98KB - Virtual size: 97KB

.rdata
Size: 857KB - Virtual size: 856KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 30KB - Virtual size: 29KB

.reloc
Size: 3KB - Virtual size: 3KB