bf12df6c36458f67b6936c6aa9ffb401816a67c769d635f9e20263d7648bd023

Sharing

Copy URL

Twitter E-mail

General

Target

bf12df6c36458f67b6936c6aa9ffb401816a67c769d635f9e20263d7648bd023
Size

702KB
MD5

2fd964020506c5b348d0ba4ff8fbe6ee
SHA1

85412dafc58908b383c501556a9c0fca5941b89f
SHA256

bf12df6c36458f67b6936c6aa9ffb401816a67c769d635f9e20263d7648bd023
SHA512

91b7d64dca072711aca5e3e68edd74f5873867933e5a42208f9cb97edcea3bf600e5e67b829bd3af563d20bbfecdcc9efdcf3e04cf6c148b0c6c0d12234b7e97
SSDEEP

12288:z4JGloROJCAI4U7o5jxpXQgq/ukxng3BcUzVSusFSpu/sl1T2oD8MO:8JGloRoCAI4z5jxpXQu7zVkFSpu/2T2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf12df6c36458f67b6936c6aa9ffb401816a67c769d635f9e20263d7648bd023

Files

bf12df6c36458f67b6936c6aa9ffb401816a67c769d635f9e20263d7648bd023
.exe windows:4 windows x86 arch:x86

716646ba85188c24e6428eab01810f3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFullPathNameA
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__getmainargs
__initenv
__mb_cur_max
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_access
_amsg_exit
_cexit
_environ
_errno
_fileno
_getcwd
_initterm
_iob
_isatty
_isctype
_lock
_onexit
_rmdir
_setjmp3
_strdup
_strtoi64
_strtoui64
_unlink
_unlock
abort
atoi
calloc
clearerr
clock
exit
fclose
ferror
fgetc
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getc
getenv
isalnum
isalpha
isspace
isxdigit
localeconv
localtime
longjmp
malloc
mbstowcs
memchr
memcpy
memmove
memset
perror
realloc
rename
rewind
setlocale
setvbuf
signal
strcat
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strrchr
strstr
strtok
strtol
strtoul
time
tolower
toupper
ungetc
vfprintf
wcslen
wcstombs

shlwapi

PathMatchSpecA

rlm1402

rlm_checkin
rlm_checkout
rlm_close
rlm_errstring
rlm_init
rlm_license_contract
rlm_license_customer
rlm_license_stat
rlm_license_type
rlm_stat

Sections

.text
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 832KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

716646ba85188c24e6428eab01810f3f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

shlwapi

rlm1402

Sections

.text Size: 580KB - Virtual size: 580KB

.data Size: 26KB - Virtual size: 26KB

.rdata Size: 62KB - Virtual size: 62KB

.bss Size: - Virtual size: 832KB

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 584B

.reloc Size: 27KB - Virtual size: 26KB

.text
Size: 580KB - Virtual size: 580KB

.data
Size: 26KB - Virtual size: 26KB

.rdata
Size: 62KB - Virtual size: 62KB

.bss
Size: - Virtual size: 832KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 584B

.reloc
Size: 27KB - Virtual size: 26KB