346352927e02a12491361e2f275d4e85ad7af829db7b08c178aff1d85368d352

Sharing

Copy URL Twitter E-mail

General

Target

346352927e02a12491361e2f275d4e85ad7af829db7b08c178aff1d85368d352
Size

528KB
MD5

5176d4c9be5e928d2a596f4214996c48
SHA1

eb4835bdad8a2f8502942e9fce8398becc28b7ce
SHA256

346352927e02a12491361e2f275d4e85ad7af829db7b08c178aff1d85368d352
SHA512

1ccdad891d71b7a3f9f2a6e186cd559e6bdc57580ec3ee5dc3beffc770013693fe4632206818bc0999d0787825a6ced8f86541b921376ec37933c77383232a6f
SSDEEP

6144:jtB7bnrNUwKJcfh2mq1Zi2HAzzZ1INeWe9Rlvm/JKgbZ4lKJcfh2m21ZZ:jtR+wpq1Zi2H4IwgKPp21ZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
346352927e02a12491361e2f275d4e85ad7af829db7b08c178aff1d85368d352

Files

346352927e02a12491361e2f275d4e85ad7af829db7b08c178aff1d85368d352
.exe windows:10 windows x64 arch:x64

8ad7d3f07924e8c2b7127391afd2da11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

IEDiagCmd.pdb

Imports

msvcrt

_vsnwprintf
_callnewh
malloc
?terminate@@YAXXZ
_amsg_exit
_cexit
??3@YAXPEAX@Z
memcpy
memset
_itow
_errno

kernel32

SetLastError
GetModuleHandleA
GetProcAddress
GetVersion
GetLastError
VirtualQuery
TerminateProcess
GetCurrentProcess
Sleep
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
LoadLibraryW
FreeLibrary
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringA
SetUnhandledExceptionFilter
QueryPerformanceCounter

mscoree

CorBindToRuntimeEx
_CorExeMain

ole32

CoCreateInstance

comctl32

ord332
ord334
ord386
ord328

oleacc

ObjectFromLresult

oleaut32

VariantInit
SysFreeString
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString

user32

RegisterWindowMessageW
SendMessageTimeoutW

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 336KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ad7d3f07924e8c2b7127391afd2da11

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

mscoree

ole32

comctl32

oleacc

oleaut32

user32

Sections

.text Size: 88KB - Virtual size: 84KB

.nep Size: 4KB - Virtual size: 96B

.rdata Size: 336KB - Virtual size: 334KB

.data Size: 4KB - Virtual size: 1KB

.pdata Size: 4KB - Virtual size: 456B

.rsrc Size: 84KB - Virtual size: 80KB

.reloc Size: 4KB - Virtual size: 68B

.text
Size: 88KB - Virtual size: 84KB

.nep
Size: 4KB - Virtual size: 96B

.rdata
Size: 336KB - Virtual size: 334KB

.data
Size: 4KB - Virtual size: 1KB

.pdata
Size: 4KB - Virtual size: 456B

.rsrc
Size: 84KB - Virtual size: 80KB

.reloc
Size: 4KB - Virtual size: 68B