f4c1ca052c500e23831032ae287ce8085fbd33394f9c9e6f449fe7654126bdcf

Sharing

Copy URL

Twitter E-mail

General

Target

f4c1ca052c500e23831032ae287ce8085fbd33394f9c9e6f449fe7654126bdcf
Size

1.5MB
MD5

f7dcdac5088d8e85e3fc5955a4e6872f
SHA1

da559f16cbeaf2d81297a9146e694de6ea6d71fa
SHA256

f4c1ca052c500e23831032ae287ce8085fbd33394f9c9e6f449fe7654126bdcf
SHA512

89c6478e0ae544021ef19bb6e12ad89fb16c8fa3ff40ecde9b62b8d91ac94688d2d935ebfa0c7514ad2411582f257c6480a004fdb436b6b7e712a3133d685655
SSDEEP

24576:Q3U0Cvbfma6MB6G4bxkajh/AI/JewE1a07NULDafCFoLFksp/6pvFMbAdnh:30w6665bvtotNULDaTxQvFMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4c1ca052c500e23831032ae287ce8085fbd33394f9c9e6f449fe7654126bdcf

Files

f4c1ca052c500e23831032ae287ce8085fbd33394f9c9e6f449fe7654126bdcf
.exe windows:6 windows x64 arch:x64

bac48a181556009cd719c37fd9407c88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
GetSystemTimeAsFileTime
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess

Sections

.text
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 629KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.%4(
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.symtab
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ

.v2v
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.4h
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e;I
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bac48a181556009cd719c37fd9407c88

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: - Virtual size: 564KB

.rdata Size: - Virtual size: 629KB

.data Size: - Virtual size: 444KB

.idata Size: - Virtual size: 1KB

.%4( Size: - Virtual size: 11KB

.symtab Size: - Virtual size: 4B

.v2v Size: - Virtual size: 1.5MB

.4h Size: 512B - Virtual size: 88B

.e;I Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 512B - Virtual size: 12B

.text
Size: - Virtual size: 564KB

.rdata
Size: - Virtual size: 629KB

.data
Size: - Virtual size: 444KB

.idata
Size: - Virtual size: 1KB

.%4(
Size: - Virtual size: 11KB

.symtab
Size: - Virtual size: 4B

.v2v
Size: - Virtual size: 1.5MB

.4h
Size: 512B - Virtual size: 88B

.e;I
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 512B - Virtual size: 12B