fe86c348a3b34edd3fc0ae6e77c73c1416cc8d9a66e923e033f9017643db6ee9

Sharing

Copy URL Twitter E-mail

General

Target

fe86c348a3b34edd3fc0ae6e77c73c1416cc8d9a66e923e033f9017643db6ee9
Size

789KB
MD5

3971f0511e6ee4ccc2b6d1060c6c304d
SHA1

7f7006ecb24f8d2a18e97a25187d4f33e70f0b17
SHA256

fe86c348a3b34edd3fc0ae6e77c73c1416cc8d9a66e923e033f9017643db6ee9
SHA512

f4747c0c2959408c0f9d6ecafa1e83eb78b90d6f84a854df1526e03aa6b6e2839d80a9697364338903b001736510c49a25650acfd757c8d0ecc739ffdd84e1f8
SSDEEP

12288:ILf3THPBi/GXEF36hLjAlrNqY0+tTO34lSkC3+yUSA+37lEu+5niON5wLNh:ILPTHpzEPSY0KSIo13O+ZEukiC5wP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe86c348a3b34edd3fc0ae6e77c73c1416cc8d9a66e923e033f9017643db6ee9

Files

fe86c348a3b34edd3fc0ae6e77c73c1416cc8d9a66e923e033f9017643db6ee9
.exe windows:5 windows x86 arch:x86

a1ac311bb3625f771fd428d43a4e8d12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaNodeProcessorMask
GlobalDeleteAtom
GetConsoleAliasesLengthW
InterlockedDecrement
GetTimeFormatA
GetModuleHandleW
EnumTimeFormatsA
ActivateActCtx
ReadFileScatter
WriteConsoleOutputA
InterlockedPopEntrySList
GetFileAttributesA
SetConsoleMode
GetModuleFileNameW
SetConsoleTitleA
RaiseException
GetConsoleAliasesW
SetLastError
GetProcAddress
GetProcessHeaps
LocalLock
BuildCommDCBW
LoadLibraryA
FreeEnvironmentStringsW
CompareStringA
DeleteCriticalSection
GetShortPathNameW
LocalFileTimeToFileTime
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetLastError
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
VirtualAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CloseHandle

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1ac311bb3625f771fd428d43a4e8d12

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 622KB - Virtual size: 621KB

.data Size: 12KB - Virtual size: 27.3MB

.rsrc Size: 109KB - Virtual size: 108KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 622KB - Virtual size: 621KB

.data
Size: 12KB - Virtual size: 27.3MB

.rsrc
Size: 109KB - Virtual size: 108KB