d38945a93a926169cbe878afa6b292a5b52c570b61dc096725a0ddb8fdd5209e

Sharing

Copy URL Twitter E-mail

General

Target

d38945a93a926169cbe878afa6b292a5b52c570b61dc096725a0ddb8fdd5209e
Size

152KB
MD5

dce94fa98fb323874622b13a5ba9e1bc
SHA1

9e56cbfa63e66917330cef99fb0b24188df0e87a
SHA256

d38945a93a926169cbe878afa6b292a5b52c570b61dc096725a0ddb8fdd5209e
SHA512

496646bfde16c117e9954a7f429430d69abca19e606e9d6fa778fa750d4eeca0cbc3f114494bd50cace7e7002dc0d2d6821dc40f7dc62eff290885881d0fda07
SSDEEP

3072:AJ+lrirzY6uOmcsmZL+MXiWnmVdOKMgFstNMn7:LiQ6ccslWnmmgsM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d38945a93a926169cbe878afa6b292a5b52c570b61dc096725a0ddb8fdd5209e

Files

d38945a93a926169cbe878afa6b292a5b52c570b61dc096725a0ddb8fdd5209e
.exe windows:4 windows x86 arch:x86

c66cc39274117a4eb6b4f43cc658ade8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetVersionExA
GetModuleHandleW
VirtualAlloc
GetVersionExW
HeapAlloc
GetCurrentProcess
GetACP
LCMapStringW
GetModuleHandleA
GetOEMCP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
RtlUnwind
GetStartupInfoW
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapReAlloc
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
Sleep
WideCharToMultiByte
LCMapStringA
GetCPInfo
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA

gdi32

CreateBitmap

ole32

CLSIDFromProgID
ReleaseStgMedium
CoUninitialize
StringFromCLSID
OleUninitialize
OleInitialize
CoReleaseMarshalData

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c66cc39274117a4eb6b4f43cc658ade8

Headers

File Characteristics

Imports

kernel32

gdi32

ole32

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 72KB - Virtual size: 73KB

.tls Size: 4KB - Virtual size: 28B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 72KB - Virtual size: 73KB

.tls
Size: 4KB - Virtual size: 28B

.reloc
Size: 4KB - Virtual size: 3KB