cefcf2a64fa98ace731a8cc1e58757ddecf678c4981048d1da07f4d560c08f9c

Sharing

Copy URL Twitter E-mail

General

Target

cefcf2a64fa98ace731a8cc1e58757ddecf678c4981048d1da07f4d560c08f9c
Size

89KB
MD5

204d5a4f4ce64f7e8c5cf6744117a861
SHA1

56990b7ba9a14809283ab7591e9db6b9a70c76fa
SHA256

cefcf2a64fa98ace731a8cc1e58757ddecf678c4981048d1da07f4d560c08f9c
SHA512

98373b9d46c22778f9ff6df26d8d310496600b8d8734ab6d666885b78c40533d4c1ac5509603f0d20f4865dc7ef6059df12a23d6cd9f0476bc78d014deeeabd0
SSDEEP

1536:5SL3J+VV80J9YLSclaucCUijVXvsWJd09dlb6Ar:5SL3QDzJiLrlaucCU8VVMN6Ar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cefcf2a64fa98ace731a8cc1e58757ddecf678c4981048d1da07f4d560c08f9c

Files

cefcf2a64fa98ace731a8cc1e58757ddecf678c4981048d1da07f4d560c08f9c
.exe windows:6 windows x64 arch:x64

d900ed15ef52a8df6c7ed7c4941e4db3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

GetWindowLongW
GetMessageW
DefWindowProcW
PostMessageW
CreateWindowExW
SendMessageW
CallNextHookEx
WindowFromPoint
GetCursorPos
RegisterClassW
UnhookWindowsHookEx
TranslateMessage
FindWindowW
SetWindowsHookExW
PostQuitMessage
GetAncestor
DispatchMessageW

kernel32

RaiseException
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d900ed15ef52a8df6c7ed7c4941e4db3

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 3KB - Virtual size: 3KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 1024B - Virtual size: 896B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1024B - Virtual size: 896B

.reloc
Size: 2KB - Virtual size: 1KB