fee722a40f77457b514bd5ef458bb9618fc42e76a8592127bbb71d18bbe4a006

Sharing

Copy URL Twitter E-mail

General

Target

fee722a40f77457b514bd5ef458bb9618fc42e76a8592127bbb71d18bbe4a006
Size

304KB
MD5

be17a451946e61cc6418ac9695849b47
SHA1

1d19f3686d6d1a511aee7cb51db10ca633c4aa4e
SHA256

fee722a40f77457b514bd5ef458bb9618fc42e76a8592127bbb71d18bbe4a006
SHA512

528e92c13f93e185da38e998f3f1294b265fa1ff4572b20521e36e4c03154a58c032a5cfb3ed073abc42f86dfb3dbab04f81164551c50bf79f4f825c66a1e975
SSDEEP

3072:XjNpACEOUvrdsHbVQXp8jbb1KSohjC9lOSuJu5xKk0O6t:xpAMUKeZ8jbbo/5SdmO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fee722a40f77457b514bd5ef458bb9618fc42e76a8592127bbb71d18bbe4a006

Files

fee722a40f77457b514bd5ef458bb9618fc42e76a8592127bbb71d18bbe4a006
.exe windows:5 windows x86 arch:x86

b500766eedd8cd66ef672e0b2aea6485

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
TryEnterCriticalSection
GetDefaultCommConfigW
CallNamedPipeA
InterlockedDecrement
CreateDirectoryW
GetUserDefaultLCID
FindCloseChangeNotification
GetComputerNameW
GetModuleHandleW
GetConsoleAliasesLengthA
FormatMessageA
ReadConsoleOutputA
GetDateFormatA
GetCommandLineA
GetSystemTimes
LoadLibraryW
LocalShrink
GlobalFlags
HeapCreate
GetFileAttributesW
GetBinaryTypeW
GetStartupInfoW
RaiseException
FillConsoleOutputCharacterW
GetLastError
GetProcAddress
InterlockedExchangeAdd
LocalAlloc
GetFileType
FindAtomA
FoldStringW
lstrcatW
FreeEnvironmentStringsW
VirtualProtect
EnumDateFormatsW
WaitForDebugEvent
CloseHandle
DeleteAtom
GetConsoleSelectionInfo
HeapFree
HeapAlloc
MultiByteToWideChar
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

LoadIconA

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b500766eedd8cd66ef672e0b2aea6485

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 183KB - Virtual size: 182KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 63KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 105KB - Virtual size: 104KB

.text
Size: 183KB - Virtual size: 182KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 63KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 105KB - Virtual size: 104KB