0f036d87c9d75b0f9d46c381cd3eb3b514398360df1b84057a152a172712f829

Sharing

Copy URL Twitter E-mail

General

Target

0f036d87c9d75b0f9d46c381cd3eb3b514398360df1b84057a152a172712f829
Size

334KB
MD5

c6f3bde564d7f853ba11f87fc5e60da8
SHA1

ec2a9889152a6748bb8fce9d510dc2d50fef1f0c
SHA256

0f036d87c9d75b0f9d46c381cd3eb3b514398360df1b84057a152a172712f829
SHA512

c2227c51c92c51c05658a9d0aef00bed8f7355fe88647da9c37a139674ecc356d4c9c0430bd0983f232273635da3d6500d413a671e8fd31c5cdce53408efbe55
SSDEEP

6144:zlEddAs0IdTZmauiA2X0y7dAQdzoeeRH:z2TZOgdAgzo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f036d87c9d75b0f9d46c381cd3eb3b514398360df1b84057a152a172712f829

Files

0f036d87c9d75b0f9d46c381cd3eb3b514398360df1b84057a152a172712f829
.exe windows:5 windows x86 arch:x86

65c190b11ae03287954f0322c9d82414

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterA
TryEnterCriticalSection
GetConsoleAliasesLengthW
CallNamedPipeA
SetUnhandledExceptionFilter
InterlockedDecrement
CreateDirectoryW
GlobalLock
GetUserDefaultLCID
GetComputerNameW
GetModuleHandleW
LocalFlags
ReadConsoleOutputA
GetCommandLineA
GetSystemTimes
LoadLibraryW
HeapCreate
GetFileAttributesW
GetBinaryTypeW
GetStartupInfoW
GetFullPathNameA
RaiseException
GetLastError
GetProcAddress
InterlockedExchangeAdd
LocalAlloc
GetFileType
FindNextChangeNotification
FindAtomA
FoldStringW
FreeEnvironmentStringsW
VirtualProtect
EnumDateFormatsW
CloseHandle
DeleteAtom
GetConsoleSelectionInfo
DebugActiveProcess
HeapFree
HeapAlloc
MultiByteToWideChar
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

LoadIconA

advapi32

CreateServiceA

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65c190b11ae03287954f0322c9d82414

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 215KB - Virtual size: 215KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 63KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 102KB - Virtual size: 101KB

.text
Size: 215KB - Virtual size: 215KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 63KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 102KB - Virtual size: 101KB