cea90e98bfd75ded84f06b3d83d072227a17c0e4eafb294cfbf85d521aca2c77

Sharing

Copy URL Twitter E-mail

General

Target

cea90e98bfd75ded84f06b3d83d072227a17c0e4eafb294cfbf85d521aca2c77
Size

365KB
MD5

bd1bcb0875b32e694e0a1c2d2d1d9575
SHA1

4144a6855b5a5897a4f80f98024a2d4fd5aa16ee
SHA256

cea90e98bfd75ded84f06b3d83d072227a17c0e4eafb294cfbf85d521aca2c77
SHA512

148c595620638e49cb0abc08b6504c1ce7516dfef474fb74e8537eaeb56c6f1140b2796c9f31651599e34741e69b9b4823cf39a89521504826195efa8e185aeb
SSDEEP

6144:Opk0RFh+Afad3b90BJfSfEHVH41O26kTBaJCq3ANr7cd0:EhFnWbWffSfEHdaOrkT8JtX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cea90e98bfd75ded84f06b3d83d072227a17c0e4eafb294cfbf85d521aca2c77

Files

cea90e98bfd75ded84f06b3d83d072227a17c0e4eafb294cfbf85d521aca2c77
.exe windows:6 windows x86 arch:x86

6ce71736c9dd531bfd47b1e5e6281368

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryExA
LoadResource
LockResource
SizeofResource
lstrcmpiA
LoadLibraryA
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
GetCurrentThreadId
CreateFileW
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
CloseHandle
DecodePointer
WriteFile
GetStringTypeW
SetStdHandle
FindNextFileA
FindFirstFileExA
FindClose
CreateFileA
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleFileNameW
RtlUnwind
SetLastError
EncodePointer
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileType
GetCommandLineA
GetCommandLineW
CreateDirectoryA

user32

CharNextA
MessageBoxA
DestroyWindow
DefWindowProcA

advapi32

SystemFunction036
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

shell32

SHGetFolderPathA

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ce71736c9dd531bfd47b1e5e6281368

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 65KB - Virtual size: 64KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 5KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 264KB - Virtual size: 264KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 65KB - Virtual size: 64KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 5KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 264KB - Virtual size: 264KB

.reloc
Size: 5KB - Virtual size: 4KB