805c50e06d8c0479499457b422c327904b5c01cfd4c6fd01fea655d7d9c97102

Sharing

Copy URL

Twitter E-mail

General

Target

805c50e06d8c0479499457b422c327904b5c01cfd4c6fd01fea655d7d9c97102
Size

12.0MB
MD5

07be0a4c9bc2e47bfe92d3f61c580629
SHA1

cacddb270f2ba3c68b1b5573fa3b63c0f88ad2dc
SHA256

805c50e06d8c0479499457b422c327904b5c01cfd4c6fd01fea655d7d9c97102
SHA512

a3914c6bced8063b8d727daf50d70bbbeb8e23c00b5f74dbd1351131292795fb189a860cc493c425d694391550ee3478fc79fe8dfbbc47db3ad050dd72d82b73
SSDEEP

196608:ZB5l+xq4sxO5zmEzgJ20XhrbyQZ2qsFyUc/GGFiQDKJ+FBKuF2AfdXAuIWtcEXoH:ZGqDtEYp5pAy9GIiQDKJ+FPRfdwuToH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
805c50e06d8c0479499457b422c327904b5c01cfd4c6fd01fea655d7d9c97102

Files

805c50e06d8c0479499457b422c327904b5c01cfd4c6fd01fea655d7d9c97102
.exe windows:5 windows x86 arch:x86

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetProcAddress
LoadLibraryExW
SizeofResource
LockResource
LoadLibraryW
FindResourceW
WriteFile
GetModuleFileNameW
CreateFileW
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetTempPathW
GetFileAttributesW
GetCurrentDirectoryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
GetCurrentThreadId
Sleep
RaiseException
GetCommandLineW
SetFilePointerEx
FlushFileBuffers
FindFirstFileExW
FindNextFileW
FindClose
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleExW
GetVersionExW
GetNativeSystemInfo
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetEnvironmentVariableW
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
IsValidCodePage
GetDriveTypeW
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
HeapReAlloc
ExitProcess
HeapSize
GetFileType
SetStdHandle
GetFullPathNameW
GetConsoleMode
GetConsoleCP
LoadLibraryExA
HeapFree
LoadLibraryA
HeapAlloc
GetProcessHeap
IsBadReadPtr
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind

ole32

CoTaskMemFree

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ress
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 3KB - Virtual size: 11KB

.gfids Size: 512B - Virtual size: 444B

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 8KB - Virtual size: 7KB

.ress Size: 10.5MB - Virtual size: 10.5MB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 3KB - Virtual size: 11KB

.gfids
Size: 512B - Virtual size: 444B

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 8KB - Virtual size: 7KB

.ress
Size: 10.5MB - Virtual size: 10.5MB