02f54ae98dfa196c9891430b0333e3d964daa95cbc291d64d8cd3dc0141f6991

Sharing

Copy URL

Twitter E-mail

General

Target

02f54ae98dfa196c9891430b0333e3d964daa95cbc291d64d8cd3dc0141f6991
Size

106KB
MD5

6a777d70a6c6e2d2b088563914ae7f47
SHA1

ec5a5133e1d649eaf7da16fa48635dcc85bee31b
SHA256

02f54ae98dfa196c9891430b0333e3d964daa95cbc291d64d8cd3dc0141f6991
SHA512

ee4829014b68868e838464597640b636e3ee796c13f0f0f5cd4f4f17b4701f9696f221fae81afc8974392587ff5d8368117a0118c05d5b13d45bc6468ff79f4b
SSDEEP

1536:7XCavjRhSMHj9ujef0j8KO6zBzDKMrPrq8RHBQJKegNWk4xY8h:7eFWNNgN4xY8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02f54ae98dfa196c9891430b0333e3d964daa95cbc291d64d8cd3dc0141f6991

Files

02f54ae98dfa196c9891430b0333e3d964daa95cbc291d64d8cd3dc0141f6991
.exe windows:6 windows x64 arch:x64

88a16dcbb36836beebc04e8f1d91f554

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Imports

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc

api-ms-win-crt-private-l1-1-0

__C_specific_handler
memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_exit
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite

api-ms-win-crt-string-l1-1-0

strlen
strncmp

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_a
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_i
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_l
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_l
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_r
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_s
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88a16dcbb36836beebc04e8f1d91f554

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 4KB

.buildid Size: 512B - Virtual size: 53B

.bss Size: 512B - Virtual size: 420B

.pdata Size: 512B - Virtual size: 384B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 512B - Virtual size: 128B

.debug_a Size: 6KB - Virtual size: 5KB

.debug_i Size: 21KB - Virtual size: 20KB

.debug_l Size: 9KB - Virtual size: 9KB

.debug_l Size: 9KB - Virtual size: 9KB

.debug_r Size: 512B - Virtual size: 480B

.debug_s Size: 17KB - Virtual size: 16KB

.data Size: 28KB - Virtual size: 28KB

.reloc Size: 512B - Virtual size: 140B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 4KB

.buildid
Size: 512B - Virtual size: 53B

.bss
Size: 512B - Virtual size: 420B

.pdata
Size: 512B - Virtual size: 384B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 512B - Virtual size: 128B

.debug_a
Size: 6KB - Virtual size: 5KB

.debug_i
Size: 21KB - Virtual size: 20KB

.debug_l
Size: 9KB - Virtual size: 9KB

.debug_l
Size: 9KB - Virtual size: 9KB

.debug_r
Size: 512B - Virtual size: 480B

.debug_s
Size: 17KB - Virtual size: 16KB

.data
Size: 28KB - Virtual size: 28KB

.reloc
Size: 512B - Virtual size: 140B