84f0644b5f3e1f66a0889cbec06348bf1403d788c43ff2c81401db3a97de8adf

Sharing

Copy URL Twitter E-mail

General

Target

84f0644b5f3e1f66a0889cbec06348bf1403d788c43ff2c81401db3a97de8adf
Size

12.8MB
MD5

1a406fcf03e4a01853e78b09eef35bec
SHA1

5c0251e9f3d394ce25f6ac711be793463767c76b
SHA256

84f0644b5f3e1f66a0889cbec06348bf1403d788c43ff2c81401db3a97de8adf
SHA512

bee360275e3aad1f53c63eb806c8d848aade3a9d294e9e162ec6f172fa13017f466886547e96dbc80a649f764771d21de1bdca2805a2cd0de301f19bdf25af77
SSDEEP

24576:MDEz0VdwmTRjlbLRpmvZi0CDLK3cy5eiBTVPZJieLrOGOxa0Eb0Db:j2LmcysiBZh/rOGea0Eb0Db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84f0644b5f3e1f66a0889cbec06348bf1403d788c43ff2c81401db3a97de8adf

Files

84f0644b5f3e1f66a0889cbec06348bf1403d788c43ff2c81401db3a97de8adf
.exe windows:5 windows x64 arch:x64

e3ac3700ff26101b0e18b14aa43a95d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
lstrlenA
GetCurrentProcess
WaitForSingleObject
GetTickCount
VirtualFree
ReadFile
lstrcatA
VirtualAlloc
GetModuleFileNameA
IsDebuggerPresent
CloseHandle
CreateThread
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
Sleep
GetProcAddress
WriteFile
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
HeapAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

psapi

EnumProcesses

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3ac3700ff26101b0e18b14aa43a95d3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

psapi

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 12.7MB - Virtual size: 12.7MB

.reloc Size: 1024B - Virtual size: 568B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 12.7MB - Virtual size: 12.7MB

.reloc
Size: 1024B - Virtual size: 568B