0e98e4e5519bcdc46cde3bbea9d56530ce02c45cbc61afb35f281aad0a644b4c

Sharing

Copy URL Twitter E-mail

General

Target

0e98e4e5519bcdc46cde3bbea9d56530ce02c45cbc61afb35f281aad0a644b4c
Size

365KB
MD5

530dae0bc4789bbadfdcf707262a746e
SHA1

7d875d42665f91d0fa44813c8933052863d0e0ae
SHA256

0e98e4e5519bcdc46cde3bbea9d56530ce02c45cbc61afb35f281aad0a644b4c
SHA512

fe8721a712c9c0e98af819d37d58af9a8f8c91ae2d639cc4c1c135a8732e30d7e5e3c2a8f0876c9d073fd3ba32704c186d97070b17b4bcdb56c477be2762416a
SSDEEP

6144:6pQ0RDh+Afad3b90BJfSfEHVH41O26kTBaTHq3ANr7cd0:I9DnWbWffSfEHdaOrkT8TKX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e98e4e5519bcdc46cde3bbea9d56530ce02c45cbc61afb35f281aad0a644b4c

Files

0e98e4e5519bcdc46cde3bbea9d56530ce02c45cbc61afb35f281aad0a644b4c
.exe windows:6 windows x86 arch:x86

6ce71736c9dd531bfd47b1e5e6281368

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryExA
LoadResource
LockResource
SizeofResource
lstrcmpiA
LoadLibraryA
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
GetCurrentThreadId
CreateFileW
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
CloseHandle
DecodePointer
WriteFile
GetStringTypeW
SetStdHandle
FindNextFileA
FindFirstFileExA
FindClose
CreateFileA
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleFileNameW
RtlUnwind
SetLastError
EncodePointer
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileType
GetCommandLineA
GetCommandLineW
CreateDirectoryA

user32

CharNextA
MessageBoxA
DestroyWindow
DefWindowProcA

advapi32

SystemFunction036
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

shell32

SHGetFolderPathA

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ce71736c9dd531bfd47b1e5e6281368

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 65KB - Virtual size: 64KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 5KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 264KB - Virtual size: 264KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 65KB - Virtual size: 64KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 5KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 264KB - Virtual size: 264KB

.reloc
Size: 5KB - Virtual size: 4KB