23de647bed61b19b55055dbca0075152251b85d3e233b4da10aed09ccd282dfb

Sharing

Copy URL Twitter E-mail

General

Target

23de647bed61b19b55055dbca0075152251b85d3e233b4da10aed09ccd282dfb
Size

3.2MB
MD5

69a94c9a954c76719eb695f763b52cea
SHA1

3c7524b23eba7be4a16827e52e059b8a5469bf83
SHA256

23de647bed61b19b55055dbca0075152251b85d3e233b4da10aed09ccd282dfb
SHA512

1d1bf8bfdac3b86493793d5bc79911390b94a69750a5763c055f860700e3934975abd739392c1b53a499a5ffa7d56a971e1a377a38434c60d21c29aa1a6ce1ae
SSDEEP

6144:SZcdosUeOmotmnMsF33IaAO8tPLZGOHi+c1d46wp8hMwUmDm54uLhiwqlS11dXYB:S0o+Oz4nFHIamz0/0GMzf4s1dXYsOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23de647bed61b19b55055dbca0075152251b85d3e233b4da10aed09ccd282dfb

Files

23de647bed61b19b55055dbca0075152251b85d3e233b4da10aed09ccd282dfb
.exe windows:5 windows x86 arch:x86

d5631a1d0d284eebe646293697ef0847

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

CommandLineToArgvW

kernel32

HeapSize
GetCommandLineW
SetCurrentDirectoryW
GetLastError
FreeLibrary
GetModuleFileNameW
GetProcAddress
LocalFree
LoadLibraryW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
CreateFileW
RaiseException
RtlUnwind
LoadLibraryExW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
WriteFile
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW
ReadConsoleW

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

refcm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5631a1d0d284eebe646293697ef0847

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

Sections

.text Size: 132KB - Virtual size: 132KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 4KB - Virtual size: 7KB

.gfids Size: 1024B - Virtual size: 592B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.reloc Size: 8KB - Virtual size: 8KB

refcm Size: 4KB - Virtual size: 4KB

.text
Size: 132KB - Virtual size: 132KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 4KB - Virtual size: 7KB

.gfids
Size: 1024B - Virtual size: 592B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.reloc
Size: 8KB - Virtual size: 8KB

refcm
Size: 4KB - Virtual size: 4KB