c19bf0bad86fd26626e70b7e21cd47c8c4714e3dd54b8cdd7a4eee281abcd67f

Sharing

Copy URL Twitter E-mail

General

Target

c19bf0bad86fd26626e70b7e21cd47c8c4714e3dd54b8cdd7a4eee281abcd67f
Size

396KB
MD5

353e25d9d640e0f4d8d7d5bcf4a1a9f2
SHA1

0a423a0a26ec20b1a87dbfb791af832d7fd1e3ab
SHA256

c19bf0bad86fd26626e70b7e21cd47c8c4714e3dd54b8cdd7a4eee281abcd67f
SHA512

37189d214e57ca2ce9dd88a63e65120d5606612c6799ca545be5d1783dcf65315b9b0944e3d7b6130bbe9daca702f9369088338da7acb9a6eeb547938cad04b7
SSDEEP

3072:Z5IXgzPjBXr6/j1srnUF4gvtCFgGbGNuUv3PnccKZ4rGZxhG4p8IGe:ZumjBXr6rD4gvtjNuUnccKqrK7hp8IG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c19bf0bad86fd26626e70b7e21cd47c8c4714e3dd54b8cdd7a4eee281abcd67f

Files

c19bf0bad86fd26626e70b7e21cd47c8c4714e3dd54b8cdd7a4eee281abcd67f
.exe windows:5 windows x86 arch:x86

a26339dff7dfc32ac46cb386c0841f9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesA
CommConfigDialogA
GetConsoleAliasExesLengthA
OpenJobObjectA
GetLogicalDriveStringsW
SetDefaultCommConfigW
GetSystemWindowsDirectoryW
SetEnvironmentVariableW
CreateJobObjectW
QueryDosDeviceA
InterlockedCompareExchange
SetVolumeMountPointW
UnlockFile
OpenSemaphoreA
_lcreat
GetTickCount
GetNumberFormatA
CreateActCtxW
GlobalAlloc
SetFileShortNameW
LoadLibraryW
LocalShrink
GetCalendarInfoA
CreateEventA
SetConsoleCP
HeapDestroy
GetFileAttributesA
VerifyVersionInfoA
GetShortPathNameA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
PeekConsoleInputW
CreateNamedPipeA
GlobalFree
GetProcessVersion
_hwrite
SetThreadPriorityBoost
LoadLibraryA
InterlockedExchangeAdd
CreateFileMappingW
CreateHardLinkW
GetNumberFormatW
SetConsoleWindowInfo
GetModuleFileNameA
EnumResourceNamesA
VirtualProtect
EnumDateFormatsW
SetProcessShutdownParameters
GetDiskFreeSpaceExA
ReadConsoleInputW
GetCurrentProcessId
LCMapStringW
HeapSize
RtlUnwind
GetStringTypeW
RaiseException
WideCharToMultiByte
Sleep
HeapAlloc
MultiByteToWideChar
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection

user32

ChangeMenuW
GetKeyNameTextA
LoadMenuA
GetWindowTextLengthA
GetDC
LoadMenuW
GetMenuState
CharUpperW
GetMenuStringA
GetCaretPos
GetCaretBlinkTime
DdeQueryStringW

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a26339dff7dfc32ac46cb386c0841f9f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 243KB - Virtual size: 243KB

.data Size: 94KB - Virtual size: 1.7MB

.rsrc Size: 58KB - Virtual size: 369KB

.text
Size: 243KB - Virtual size: 243KB

.data
Size: 94KB - Virtual size: 1.7MB

.rsrc
Size: 58KB - Virtual size: 369KB