74444b6279829845e56a653fc09f5dcb1fd619690bf4ed444d4f6a8fd0cad1ec

Sharing

Copy URL

Twitter E-mail

General

Target

74444b6279829845e56a653fc09f5dcb1fd619690bf4ed444d4f6a8fd0cad1ec
Size

24KB
MD5

021c2711ec486698cbfb64bd1b16f0b3
SHA1

213fb357d71026a2c7f86784670e5ee37ce17c1a
SHA256

74444b6279829845e56a653fc09f5dcb1fd619690bf4ed444d4f6a8fd0cad1ec
SHA512

6084e93c91c5d5af64dc4cb8a151221f6fc45e54415f4ca20e953f225926bfd8372388a7debe6d00973a8743b1bf97063db6e4fc7b70cb1e0522f4cdfa1f17dd
SSDEEP

384:liBVIAmglXEo+ymWoYszpWIWImXuLURlJlrkJr6OlhhRIpASA5pkAeAitP:sBVIAmgZCTWqzpWIWImeLqlWXJapTlnd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74444b6279829845e56a653fc09f5dcb1fd619690bf4ed444d4f6a8fd0cad1ec

Files

74444b6279829845e56a653fc09f5dcb1fd619690bf4ed444d4f6a8fd0cad1ec
.exe windows:4 windows x86 arch:x86

aca44379856b4a7ce8f401370d8a21aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetModuleHandleW
CreateEventW
IsDebuggerPresent
SetConsoleCtrlHandler
GetLocalTime
GetProcessTimes
GetCurrentProcess
CloseHandle
GetStartupInfoW
GetStdHandle
SetConsoleTitleW
SetConsoleTextAttribute
SetConsoleWindowInfo
LoadLibraryW
GetProcAddress
FreeLibrary
LocalFree
OutputDebugStringW
MapViewOfFile
GetLastError
FormatMessageW
UnmapViewOfFile
GetFileAttributesW
ResetEvent
GetFileAttributesExW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTickCount
InterlockedExchange
InterlockedIncrement
WaitForSingleObject
Sleep
SetEvent

mfc42u

ord561
ord815
ord2385
ord1568
ord665
ord1971
ord6381
ord353
ord6006
ord825

msvcrt

wcschr
_wtoi
wcscat
wcscpy
_ftol
wcsrchr
swprintf
wprintf
__CxxFrameHandler
_putws
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z

etautomark

?ETReleaseAutoMark2@@YAXXZ
?ETInitAutoMark2@@YAHXZ
?ETAutoMark@@YAHPBGPAXHP6AHN1@Z1@Z

advapi32

FreeSid
ReportEventW
CloseEventLog
OpenEventLogW
AllocateAndInitializeSid

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aca44379856b4a7ce8f401370d8a21aa

Headers

File Characteristics

Imports

kernel32

mfc42u

msvcrt

msvcp60

etautomark

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 160B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 160B