3334fbee4e4b3224ee5634c71b8b946e2ffc1d07c6dceb5d2c4195116df5a8db

Sharing

Copy URL Twitter E-mail

General

Target

3334fbee4e4b3224ee5634c71b8b946e2ffc1d07c6dceb5d2c4195116df5a8db
Size

111KB
MD5

69bf97820bc80511b55f1ef73276d84b
SHA1

20240e76269c4b7d6bd3dbed3a021f6a26fd2cf3
SHA256

3334fbee4e4b3224ee5634c71b8b946e2ffc1d07c6dceb5d2c4195116df5a8db
SHA512

d74f8b6849a823f1935de8a804dc10cd0767db91b42c197f81bcf6c0e596047bfb54dc0a9d93c8f48e087788b98b02f340bf5537c60495165165542a6f015ab2
SSDEEP

3072:0v0oonq3r5wpyRp/hR0X0YQ1X6gmoIs3K+7s/eJvVf/C:S3r5w4wzQJ6gmg/5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3334fbee4e4b3224ee5634c71b8b946e2ffc1d07c6dceb5d2c4195116df5a8db

Files

3334fbee4e4b3224ee5634c71b8b946e2ffc1d07c6dceb5d2c4195116df5a8db
.exe windows:6 windows x86 arch:x86

2293d78b47363640176516c1efe06c70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetCurrentProcess
LoadLibraryA
GetProcAddress
VirtualAllocEx
ExitProcess
GetModuleHandleW
VirtualQueryEx
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
IsDebuggerPresent

user32

MessageBoxW

vcruntime140

__std_exception_copy
memmove
__std_type_info_destroy_list
memcpy
_CxxThrowException
_except_handler4_common
__std_exception_destroy
memset

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm
_initialize_onexit_table
_initterm_e

Sections

.text
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2293d78b47363640176516c1efe06c70

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Sections

.text Size: - Virtual size: 16KB

.rdata Size: - Virtual size: 10KB

.data Size: - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: - Virtual size: 5KB

.gc Size: 107KB - Virtual size: 107KB

.text
Size: - Virtual size: 16KB

.rdata
Size: - Virtual size: 10KB

.data
Size: - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: - Virtual size: 5KB

.gc
Size: 107KB - Virtual size: 107KB