376021e649ac417fd6eababeccc5ae8a0586a9ec4c4a11d4485f7d916913a223

Sharing

Copy URL Twitter E-mail

General

Target

376021e649ac417fd6eababeccc5ae8a0586a9ec4c4a11d4485f7d916913a223
Size

179KB
MD5

38e7371f853bdaf5c79810f0eda8fd8b
SHA1

347543008890ff9c095b559ac4e3f11c8729b868
SHA256

376021e649ac417fd6eababeccc5ae8a0586a9ec4c4a11d4485f7d916913a223
SHA512

d7a1adb0e5e26a384767875b9052a666629c248f8eac0a6b3ef5d1df825a13be0968bcd4bbf065d31c90ad1c9b0303673b38b9f94d7fc65d19d6ca4b82d93b95
SSDEEP

3072:SXHj++F1yRmu5tvbeqQC2mCfnehGlWVc6jiVCH8jwZ1XKCXTV2AJecQEd:yHjD8Rmu5IeAlwcE4CsAJecQE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376021e649ac417fd6eababeccc5ae8a0586a9ec4c4a11d4485f7d916913a223

Files

376021e649ac417fd6eababeccc5ae8a0586a9ec4c4a11d4485f7d916913a223
.exe windows:6 windows x86 arch:x86

6c7ed02b9fadebad39bb58b9d86ba591

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetLocalTime
FindResourceExW
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
FindResourceW
CopyFileW
WideCharToMultiByte
DeleteFileW
FindClose
FindNextFileW
GetFileAttributesExW
GetLongPathNameW
GetLastError
SetLastError
WaitForSingleObject
CreateMutexW
GetCurrentProcess
DeleteCriticalSection
OpenProcess
GetSystemInfo
GetWindowsDirectoryW
GetVersionExW
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
MultiByteToWideChar
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
WriteConsoleW
SetFilePointerEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
CloseHandle
OutputDebugStringW
WriteFile
SetFilePointer
ReadFile
GetFileSize
GetFileAttributesW
CreateFileW
GetCurrentThread
CreateDirectoryW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetStringTypeW
LCMapStringW
IsDebuggerPresent
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCommandLineA
GetCommandLineW
VirtualAlloc
VirtualProtect
VirtualQuery
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
GetFileType

advapi32

RegOpenKeyExW
RegCloseKey
LookupAccountSidW
RevertToSelf
IsValidSid
ImpersonateLoggedOnUser
GetTokenInformation
GetLengthSid
FreeSid
DuplicateTokenEx
CopySid
CheckTokenMembership
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetThreadToken
CreateProcessAsUserW
RegQueryValueExW

shell32

ShellExecuteExW

ole32

CoInitializeEx
CoCreateGuid
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysStringLen
SysAllocString
SysAllocStringLen

shlwapi

PathFileExistsW

psapi

GetModuleFileNameExW
EnumProcessModules
EnumProcesses

userenv

UnloadUserProfile
LoadUserProfileW
DestroyEnvironmentBlock
CreateEnvironmentBlock

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c7ed02b9fadebad39bb58b9d86ba591

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

shlwapi

psapi

userenv

Sections

.text Size: 121KB - Virtual size: 121KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 2KB - Virtual size: 5KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 512B - Virtual size: 248B

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 121KB - Virtual size: 121KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 2KB - Virtual size: 5KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 512B - Virtual size: 248B

.rsrc
Size: 19KB - Virtual size: 18KB