d4d0117a12c0f134a07fadebdd07e4fcc3fa879c102337d3dbf8a79be6bba1fb

Sharing

Copy URL Twitter E-mail

General

Target

d4d0117a12c0f134a07fadebdd07e4fcc3fa879c102337d3dbf8a79be6bba1fb
Size

7.3MB
MD5

b317635c9b6d7df52a6e8d025ac54fda
SHA1

408529c918b02c3818f8757f907270f20ae78a15
SHA256

d4d0117a12c0f134a07fadebdd07e4fcc3fa879c102337d3dbf8a79be6bba1fb
SHA512

dec750b011c0ab9b2f7b0cf016b5a8132ab842c051a59028070190575facd73fbb4876a9f61146d5c91326c5dc97ddea7bba8a1561bcacbff8e7c8c8ea4357fc
SSDEEP

196608:9RLcwyJ94e2Yz81ex6Ts9nMflEe4jcTJnI:PAJJSe2XTsVslGSJnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4d0117a12c0f134a07fadebdd07e4fcc3fa879c102337d3dbf8a79be6bba1fb

Files

d4d0117a12c0f134a07fadebdd07e4fcc3fa879c102337d3dbf8a79be6bba1fb
.exe windows:6 windows x64 arch:x64

974f115daeac2ad08d76d8366207d1ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc140

ord11614

kernel32

GetCommandLineA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

EnableWindow
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

wininet

InternetOpenUrlW

wtsapi32

WTSSendMessageW

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fptable
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

974f115daeac2ad08d76d8366207d1ef

Headers

DLL Characteristics

File Characteristics

Imports

mfc140

kernel32

user32

advapi32

shell32

comctl32

wininet

wtsapi32

Sections

.text Size: 214KB - Virtual size: 214KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 2.1MB - Virtual size: 2.1MB

.pdata Size: 12KB - Virtual size: 11KB

.fptable Size: 512B - Virtual size: 256B

0 Size: 2.8MB - Virtual size: 2.8MB

1 Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 5KB - Virtual size: 5KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 214KB - Virtual size: 214KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 2.1MB - Virtual size: 2.1MB

.pdata
Size: 12KB - Virtual size: 11KB

.fptable
Size: 512B - Virtual size: 256B

0
Size: 2.8MB - Virtual size: 2.8MB

1
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 68KB - Virtual size: 67KB