be8253f95222de70255c10b3ecb41e87bc19585940580dcd8c23f40f087e3508

Sharing

Copy URL Twitter E-mail

General

Target

be8253f95222de70255c10b3ecb41e87bc19585940580dcd8c23f40f087e3508
Size

7.4MB
MD5

55414744e17be596e9af3ebd4d7bdaef
SHA1

151aef3cc744ad9b64cd25ba09e1fe31953c682a
SHA256

be8253f95222de70255c10b3ecb41e87bc19585940580dcd8c23f40f087e3508
SHA512

f261feb454394f9eb0198f23e6108501c75e1020a77723eff4e3c774f5e9ad4f8b8fa970e1039cc1d33e81fcb9316020c467a711fba5258344dba971ed5d1684
SSDEEP

196608:jbMwPtPBPzgG+ZQwqO2EEzHwU1/2fWPdcaYYtetV4xv89:jYePBPzPwqOwQCvdcTYLO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be8253f95222de70255c10b3ecb41e87bc19585940580dcd8c23f40f087e3508

Files

be8253f95222de70255c10b3ecb41e87bc19585940580dcd8c23f40f087e3508
.exe windows:6 windows x64 arch:x64

811f933de115d83eadab3d622278546f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges

kernel32

GetVersionExA
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

___lc_codepage_func

wintrust

WinVerifyTrust

Exports

Exports

_cgo_dummy_export
authorizerTrampoline
callbackTrampoline
commitHookTrampoline
compareTrampoline
compilerCallback
doneTrampoline
freeCallback
includeCallback
memoryBlockFetch
memoryBlockFetchNull
memoryBlockIteratorFilesize
memoryBlockIteratorFirst
memoryBlockIteratorNext
preUpdateHookTrampoline
rollbackHookTrampoline
scanCallbackFunc
stepTrampoline
streamRead
streamWrite
updateHookTrampoline

Sections

.text
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 579KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.[c!
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.q+f
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.o&&
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

811f933de115d83eadab3d622278546f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

wintrust

Exports

Exports

Sections

.text Size: - Virtual size: 5.2MB

.data Size: - Virtual size: 421KB

.rdata Size: - Virtual size: 5.4MB

.pdata Size: - Virtual size: 122KB

.xdata Size: - Virtual size: 37KB

.bss Size: - Virtual size: 579KB

.edata Size: - Virtual size: 656B

.idata Size: - Virtual size: 8KB

.CRT Size: - Virtual size: 96B

.tls Size: - Virtual size: 16B

.[c! Size: - Virtual size: 2.2MB

.q+f Size: 4KB - Virtual size: 3KB

.o&& Size: 7.4MB - Virtual size: 7.4MB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 5.2MB

.data
Size: - Virtual size: 421KB

.rdata
Size: - Virtual size: 5.4MB

.pdata
Size: - Virtual size: 122KB

.xdata
Size: - Virtual size: 37KB

.bss
Size: - Virtual size: 579KB

.edata
Size: - Virtual size: 656B

.idata
Size: - Virtual size: 8KB

.CRT
Size: - Virtual size: 96B

.tls
Size: - Virtual size: 16B

.[c!
Size: - Virtual size: 2.2MB

.q+f
Size: 4KB - Virtual size: 3KB

.o&&
Size: 7.4MB - Virtual size: 7.4MB

.rsrc
Size: 1KB - Virtual size: 1KB