7800310c7b9e22b0528af79913ec7fa14055e228997375321404216a00b5a3b1

Sharing

Copy URL

Twitter E-mail

General

Target

7800310c7b9e22b0528af79913ec7fa14055e228997375321404216a00b5a3b1
Size

233KB
MD5

c9604c8a94443bd545579ce55ae5ad27
SHA1

8f78a9d1d20762a330ea1de5df04d59d1a99dc04
SHA256

7800310c7b9e22b0528af79913ec7fa14055e228997375321404216a00b5a3b1
SHA512

7c7e6e47024449fd3a773ac84189b0b81e705a7ca174cc4e588ecd5bd64e9a3b6ea45ee8e93f2a568a200e31486b482934867c1fd11c7fab7a5483f6055d1e0d
SSDEEP

3072:wkO/HalJCaET6ApsLTMQUzUdcPNEohbIxny+P6CNRIqY9Wjtx+8OCMMV:wkOMHWlpsLTMQF37nLP6iRhY8khY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7800310c7b9e22b0528af79913ec7fa14055e228997375321404216a00b5a3b1

Files

7800310c7b9e22b0528af79913ec7fa14055e228997375321404216a00b5a3b1
.exe windows:5 windows x86 arch:x86

ce771cc7f72cb42764d30ed3fa34abca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesW
HeapCompact
SetEndOfFile
LocalCompact
CreateHardLinkA
EnumResourceTypesA
GlobalAlloc
LoadLibraryW
IsProcessInJob
AssignProcessToJobObject
CreateEventA
IsBadWritePtr
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
IsBadHugeWritePtr
VerLanguageNameA
SetConsoleCtrlHandler
AddAtomW
GlobalHandle
Module32FirstW
GetModuleFileNameA
GetOEMCP
HeapSetInformation
GetFileTime
GetCurrentThreadId
GetDiskFreeSpaceExA
ReadConsoleInputW
WriteConsoleW
CloseHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCommandLineW
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
IsProcessorFeaturePresent
GetModuleHandleW
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
ReadFile
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetACP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
CreateFileW

user32

CharUpperBuffA
SetCursorPos
SetCaretPos
GetCaretBlinkTime
GetMessageTime
ChangeMenuW

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 28.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cuj
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.casuna
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce771cc7f72cb42764d30ed3fa34abca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 47KB - Virtual size: 28.3MB

.cuj Size: 1024B - Virtual size: 1024B

.casuna Size: 6KB - Virtual size: 6KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 47KB - Virtual size: 28.3MB

.cuj
Size: 1024B - Virtual size: 1024B

.casuna
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 16KB - Virtual size: 15KB