3ffe4bb39696e433cb6c9bcc568a65a5782e24843bf85e6746ce731f995cfdb3

Sharing

Copy URL Twitter E-mail

General

Target

3ffe4bb39696e433cb6c9bcc568a65a5782e24843bf85e6746ce731f995cfdb3
Size

14.0MB
MD5

90be836308e3d12192c024ba8eb38df9
SHA1

d0006008905bb707f226b850cfbbd901715f0e77
SHA256

3ffe4bb39696e433cb6c9bcc568a65a5782e24843bf85e6746ce731f995cfdb3
SHA512

1b6371984ab668c5ea43ae60c092d3b5fc20939f77c36fbe80134ac6d49f1c0175f6b6802e4cdb2e7c4efdb5fb1285ec8d60308a7f99d2b0e2b54835e912a6e5
SSDEEP

393216:/7zmqlJn1OTFxDL/xBAB2i0TWqbGZ3vX395:/5lJ0TFZLZBAB+jE/N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ffe4bb39696e433cb6c9bcc568a65a5782e24843bf85e6746ce731f995cfdb3

Files

3ffe4bb39696e433cb6c9bcc568a65a5782e24843bf85e6746ce731f995cfdb3
.exe windows:6 windows x64 arch:x64

f7dd49ad6aafbcbb2844dc298bc6877d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetWindowTextW

gdi32

GetDeviceCaps

advapi32

AdjustTokenPrivileges

ws2_32

freeaddrinfo

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p,u
Size: - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.O^;
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bz
Size: 14.0MB - Virtual size: 14.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7dd49ad6aafbcbb2844dc298bc6877d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 136KB

.data Size: - Virtual size: 1.6MB

.pdata Size: - Virtual size: 55KB

_RDATA Size: - Virtual size: 244B

.p,u Size: - Virtual size: 8.1MB

.O^; Size: 3KB - Virtual size: 3KB

.Bz Size: 14.0MB - Virtual size: 14.0MB

.rsrc Size: 1024B - Virtual size: 736B

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 136KB

.data
Size: - Virtual size: 1.6MB

.pdata
Size: - Virtual size: 55KB

_RDATA
Size: - Virtual size: 244B

.p,u
Size: - Virtual size: 8.1MB

.O^;
Size: 3KB - Virtual size: 3KB

.Bz
Size: 14.0MB - Virtual size: 14.0MB

.rsrc
Size: 1024B - Virtual size: 736B