12d46fe26f0f95cefbb73f29f20ee28e23e889461153a27298497a3d17748ef5

Sharing

Copy URL Twitter E-mail

General

Target

12d46fe26f0f95cefbb73f29f20ee28e23e889461153a27298497a3d17748ef5
Size

51KB
MD5

392774a7a087c4efd74ce4415b33b450
SHA1

cda7a3b3c95ce881d9ef7e0046f8703041c835c9
SHA256

12d46fe26f0f95cefbb73f29f20ee28e23e889461153a27298497a3d17748ef5
SHA512

b82b65bd083bdcd3e6bf7842306519363ed63d3670276a4f0350bb3e45d92d53d074e82da298b035a466913931365962121efebb42f475196be05649bd8e4ed0
SSDEEP

768:9PrvODaFRI/FrJnTluJHXWGRjmgUVVMn9pW+:NTODaFulDuFXW3c9Y+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12d46fe26f0f95cefbb73f29f20ee28e23e889461153a27298497a3d17748ef5

Files

12d46fe26f0f95cefbb73f29f20ee28e23e889461153a27298497a3d17748ef5
.exe windows:5 windows x86 arch:x86

76664ca07cf1e1fae14b9820f225504c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenServiceA
OpenSCManagerA
QueryServiceStatus

kernel32

ReadFile
WriteFile
GetTimeFormatW
GetDateFormatW
GetSystemDefaultLCID
Sleep
SetFilePointer
CreateFileA
CreateEventA
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
CloseHandle
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CreateThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
CreateDirectoryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
CreateProcessA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
WaitForSingleObject
GetOverlappedResult
ResetEvent
WideCharToMultiByte

gdi32

GetStockObject
GetTextMetricsA
TextOutA

user32

SendMessageA
InvalidateRect
LoadStringA
wsprintfA
ReleaseDC
GetDC
GetClientRect
EndDialog
PostQuitMessage
EndPaint
ValidateRect
BeginPaint
SetWindowTextA
EnableMenuItem
GetMenu
DestroyWindow
MessageBoxA
DialogBoxParamA
DefWindowProcA
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA

comdlg32

GetSaveFileNameA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��;8
Size: 951.9MB - Virtual size: 951.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

Sharing

General

Malware Config

Signatures

Files

76664ca07cf1e1fae14b9820f225504c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comdlg32

Sections

.text Size: 34KB - Virtual size: 34KB

.data Size: 10KB - Virtual size: 279KB

.rsrc Size: 4KB - Virtual size: 4KB

���;8 Size: 951.9MB - Virtual size: 951.9MB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 10KB - Virtual size: 279KB

.rsrc
Size: 4KB - Virtual size: 4KB

��;8
Size: 951.9MB - Virtual size: 951.9MB