8dd836abf976973fd822087e0cac7f842de005c68a409e66fe82e173146a29f5

Sharing

Copy URL

Twitter E-mail

General

Target

8dd836abf976973fd822087e0cac7f842de005c68a409e66fe82e173146a29f5
Size

1.5MB
MD5

5591dbb7b79746f03c3e55110bc532ae
SHA1

a83001fbf8c30a1b3e9eb035c937a98ab49c41fd
SHA256

8dd836abf976973fd822087e0cac7f842de005c68a409e66fe82e173146a29f5
SHA512

5bcc2bd13734cec1b83856bd6a12914c2b13bf5bd671b0ea24840402e3279633e77b472b40549e86f3f797b50e9cf11f2f61ced764c7e047cdd16a53ea7fe9ca
SSDEEP

24576:XyciHQODqDv73otjpzVgWcrPzt5ZQ24o4qA7RjXPTAcjdZafCFoLFksp/6My2U3Y:0HQj7qeF5ZwfLpjraTxpJ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd836abf976973fd822087e0cac7f842de005c68a409e66fe82e173146a29f5

Files

8dd836abf976973fd822087e0cac7f842de005c68a409e66fe82e173146a29f5
.exe windows:6 windows x64 arch:x64

bac48a181556009cd719c37fd9407c88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
GetSystemTimeAsFileTime
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess

Sections

.text
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 629KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..S{
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.symtab
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ

.rj~
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.C2e
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2w;
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bac48a181556009cd719c37fd9407c88

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: - Virtual size: 564KB

.rdata Size: - Virtual size: 629KB

.data Size: - Virtual size: 444KB

.idata Size: - Virtual size: 1KB

..S{ Size: - Virtual size: 11KB

.symtab Size: - Virtual size: 4B

.rj~ Size: - Virtual size: 1.5MB

.C2e Size: 512B - Virtual size: 88B

.2w; Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 512B - Virtual size: 12B

.text
Size: - Virtual size: 564KB

.rdata
Size: - Virtual size: 629KB

.data
Size: - Virtual size: 444KB

.idata
Size: - Virtual size: 1KB

..S{
Size: - Virtual size: 11KB

.symtab
Size: - Virtual size: 4B

.rj~
Size: - Virtual size: 1.5MB

.C2e
Size: 512B - Virtual size: 88B

.2w;
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 512B - Virtual size: 12B