cf116d73d7f072530c4c937c785c116c423348f3aecc8a3ba0355495e5fc45f1

Sharing

Copy URL

Twitter E-mail

General

Target

cf116d73d7f072530c4c937c785c116c423348f3aecc8a3ba0355495e5fc45f1
Size

362KB
MD5

e9631cbe69b3ba045e356e1ee0300fed
SHA1

1890d1d037f5677992c85e8454c8c6f00cde797e
SHA256

cf116d73d7f072530c4c937c785c116c423348f3aecc8a3ba0355495e5fc45f1
SHA512

b7f88e6b9b0b36c452df422915c7c9d8996ef115f9f8ddcd32c62d8977402835463a594f30815765e084aebb50676f22344c5eed76c3e451b0fd7c8ea1c43f91
SSDEEP

3072:yFDhVlOzx78jaD98YbD0aCquvo3rHB6RXyPn0Xy/Xm6bQV1ijR6GPOr5IWOin9bn:kFGzx7z8taCqiobhqXW/2SYe6/N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf116d73d7f072530c4c937c785c116c423348f3aecc8a3ba0355495e5fc45f1

Files

cf116d73d7f072530c4c937c785c116c423348f3aecc8a3ba0355495e5fc45f1
.exe windows:5 windows x86 arch:x86

6b7a180167b1961663d907c941895783

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesW
SetFilePointer
PeekNamedPipe
GetConsoleAliasExesA
CommConfigDialogA
GetConsoleAliasExesLengthA
InterlockedIncrement
SetDefaultCommConfigW
GetSystemWindowsDirectoryW
QueryDosDeviceA
InterlockedCompareExchange
UnlockFile
CreateHardLinkA
GetTickCount
CreateActCtxW
GlobalAlloc
SetFileShortNameW
LoadLibraryW
GetCalendarInfoA
SetConsoleCP
HeapDestroy
GetFileAttributesA
GetACP
CreateJobObjectA
LCMapStringA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
FindVolumeMountPointClose
CreateNamedPipeA
GlobalFree
GetProcessVersion
SetThreadPriorityBoost
LoadLibraryA
CreateFileMappingW
GetNumberFormatW
CreateEventW
SetConsoleWindowInfo
HeapWalk
OpenJobObjectW
SetEnvironmentVariableA
GetModuleFileNameA
EnumDateFormatsA
VirtualProtect
PeekConsoleInputA
SetProcessShutdownParameters
OpenSemaphoreW
GetDiskFreeSpaceExA
GetCurrentProcessId
WriteConsoleW
HeapSize
FlushFileBuffers
SetStdHandle
GetStringTypeW
LCMapStringW
CreateFileW
HeapAlloc
MultiByteToWideChar
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
IsProcessorFeaturePresent
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
GetCPInfo
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
Sleep

user32

GetDC
ChangeMenuW
GetKeyNameTextA
LoadMenuA
DdeQueryStringA
GetWindowTextLengthA
CharUpperBuffA
LoadMenuW
GetMenuState
GetMenuStringA

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 93KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b7a180167b1961663d907c941895783

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winhttp

msimg32

Sections

.text Size: 235KB - Virtual size: 235KB

.data Size: 93KB - Virtual size: 1.7MB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 235KB - Virtual size: 235KB

.data
Size: 93KB - Virtual size: 1.7MB

.rsrc
Size: 32KB - Virtual size: 31KB