9a361bd923b652f91b95c6354303c2cfd35343a6d6085092fea64f5482a34dad

Sharing

Copy URL Twitter E-mail

General

Target

9a361bd923b652f91b95c6354303c2cfd35343a6d6085092fea64f5482a34dad
Size

63KB
MD5

dfcd07c6fe27ae4e961ca84e8d6bea60
SHA1

e12c7c2b0892294e34be237d7c88b0131bb1287b
SHA256

9a361bd923b652f91b95c6354303c2cfd35343a6d6085092fea64f5482a34dad
SHA512

ba210fe05c1574669cff6e466ffac71b4d101b71ee68f7f3033cf2c3f10864ca880fd820ebb5f143fc16a663d6bf2ea8e2ad4e96891f4e3b7e1f2e3c94f8b907
SSDEEP

1536:DJKfN7DisXOmRqR7DisXOmRq9vm+nbkB/3:nqTu+b6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a361bd923b652f91b95c6354303c2cfd35343a6d6085092fea64f5482a34dad

Files

9a361bd923b652f91b95c6354303c2cfd35343a6d6085092fea64f5482a34dad
.exe windows:1 windows x86 arch:x86

92fb42d99b79deb774d6179e45bafa1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

claasc

ASCII

clanet

NetCloseCallBackWindow
NetDebugTrace

clarun

Cla$CLEAR
Cla$clearstr
Cla$code
Cla$COMMAND
CLA$FILE_DESTROY
Cla$FREEqueue
Cla$init
Cla$PushLong
Cla$PushString
Cla$SetPropS
Cla$StackCompareN
Cla$StackConcat
Cla$THREAD_FILE
THR$GetInstance
_exit
__a_chkstk
__e_stack
__sysinit
__sysstart

functionsf

FUNCTIONS:INIT@F10ERRORCLASS8INICLASS
FUNCTIONS:KILL@F

vrmldataf

$ThisMessageBox
$VECULIMINI
CONSTRUCT@F10ERRORCLASS
CONSTRUCT@F10FUZZYCLASS
CONSTRUCT@F16ERRORSTATUSCLASS
CONSTRUCT@F8INICLASS
DESTRUCT@F16ERRORSTATUSCLASS
ds_SetEndSessionHandler
ds_SetOkToEndSessionHandler
INIT@F10ERRORCLASS16ERRORSTATUSCLASS
INIT@F10FUZZYCLASS
INIT@F8INICLASSsbll
KILL@F10FUZZYCLASS
KILL@F8INICLASS
SETOPTION@F10FUZZYCLASSUcUc
VMT$ERRORCLASS
VMT$ERRORSTATUSCLASS
VMT$FUZZYCLASS
VMT$INICLASS
VRMLDATA:INIT@F10ERRORCLASS8INICLASS
VRMLDATA:KILL@F

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cwtls
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cwdebug
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92fb42d99b79deb774d6179e45bafa1a

Headers

File Characteristics

Imports

claasc

clanet

clarun

functionsf

vrmldataf

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 10KB

.cwtls Size: 512B - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 37KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 500B

.cwdebug Size: 512B - Virtual size: 28B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 10KB

.cwtls
Size: 512B - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 37KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 500B

.cwdebug
Size: 512B - Virtual size: 28B