4b523760b9b9b69380ae75438743ff4a812ff46a1956a4c1a01dacc2636ab6b1

Sharing

Copy URL Twitter E-mail

General

Target

4b523760b9b9b69380ae75438743ff4a812ff46a1956a4c1a01dacc2636ab6b1
Size

365KB
MD5

fc543bda9ea43e4a797c3333c9a48b25
SHA1

71c965c03d07f9383595ed57f2dec602965f87ca
SHA256

4b523760b9b9b69380ae75438743ff4a812ff46a1956a4c1a01dacc2636ab6b1
SHA512

26f5ab44f2b54874ae9f83708514ada646816e613e8898044a40271f21244706abfc049d5d185eb96cb9b567f510e34f0ba9aab715f4cda04360e745088000bc
SSDEEP

6144:3sBOX4QnVncabb7fx1Qm02j2MXrYoI7uJs4Npsbw:8a1nVncIpWaYoI7uJszk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b523760b9b9b69380ae75438743ff4a812ff46a1956a4c1a01dacc2636ab6b1

Files

4b523760b9b9b69380ae75438743ff4a812ff46a1956a4c1a01dacc2636ab6b1
.exe windows:6 windows x86 arch:x86

5fc00a0fd955b00a39db7c5df9f8491c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\constructicon\builds\gfx\three\22.20\drivers\2d\dal\eeu\atieah\build\wNow\B_rel\atieah32.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

DecodePointer
ReadConsoleW
ExpandEnvironmentStringsA
GetFileAttributesA
CloseHandle
OpenProcess
GetModuleHandleA
GetProcAddress
QueryFullProcessImageNameW
GetCommandLineA
QueryPerformanceCounter
CreateFileW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
ReadFile
GetCurrentProcessId
TlsSetValue
GetLastError
ResumeThread
CreateProcessA
CreateProcessW
VirtualAllocEx
VirtualProtectEx
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
SetLastError
VirtualProtect
VirtualQuery
FreeLibrary
LoadLibraryA
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
WriteConsoleW
TlsFree
LoadLibraryExW
EncodePointer
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCurrentThread
WideCharToMultiByte
HeapFree
HeapAlloc
GetFileType
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetProcessHeap
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode

advapi32

RegGetValueW

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fc00a0fd955b00a39db7c5df9f8491c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

kernel32

advapi32

Sections

.text Size: 311KB - Virtual size: 310KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 4KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 311KB - Virtual size: 310KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 4KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 9KB