b96ab6c88f951c9bd60800a30c93b777b5dfae31cbd02218a1e9e584dc3953f8

Sharing

Copy URL Twitter E-mail

General

Target

b96ab6c88f951c9bd60800a30c93b777b5dfae31cbd02218a1e9e584dc3953f8
Size

255KB
MD5

731e80d3ba46f0d4deb8ddb84f7e63a3
SHA1

a3e0dd069935590cb3e4686c05e1bec18f080989
SHA256

b96ab6c88f951c9bd60800a30c93b777b5dfae31cbd02218a1e9e584dc3953f8
SHA512

f5deea79766d5470064973f7c31933d2515eb0285e68aafae686955f70ec47d94b71ed6a4c393d4ae55ee2906c99daff443ba4a91a14deaedf3a42cec7078d41
SSDEEP

3072:HEwLSUFC/rSYcFcrLhH8hCeRftzuNvTQm5nFPc/2NDvh4ZO:HEwPFC/4cGh/6Nc/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b96ab6c88f951c9bd60800a30c93b777b5dfae31cbd02218a1e9e584dc3953f8

Files

b96ab6c88f951c9bd60800a30c93b777b5dfae31cbd02218a1e9e584dc3953f8
.exe windows:5 windows x86 arch:x86

a8a2fe37663684a87c2991bed3202646

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcess
GetComputerNameA
GetFullPathNameA
FillConsoleOutputCharacterA
TryEnterCriticalSection
GetConsoleAliasesLengthW
GetNumaProcessorNode
GetDefaultCommConfigW
SetUnhandledExceptionFilter
InterlockedDecrement
WaitNamedPipeA
CreateDirectoryW
GlobalLock
SetConsoleScreenBufferSize
FindCloseChangeNotification
FreeEnvironmentStringsA
GetModuleHandleW
GetConsoleAliasesLengthA
GetUserDefaultLangID
GetCommandLineA
GetSystemTimes
GlobalAlloc
LoadLibraryW
WriteConsoleOutputA
HeapDestroy
SetConsoleMode
RaiseException
GetStartupInfoA
GetStdHandle
GetLastError
GetProcAddress
LoadLibraryA
UnhandledExceptionFilter
FindAtomA
FoldStringW
GetModuleFileNameA
EnumDateFormatsA
VirtualProtect
LocalSize
CloseHandle
DeleteAtom
HeapFree
HeapAlloc
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetModuleHandleA

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8a2fe37663684a87c2991bed3202646

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 42KB - Virtual size: 2.0MB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 42KB - Virtual size: 2.0MB