a2e50c69b2d31247f9cd1097c76cb3818037b8ef7916ec6c2d8d87be78d17087

Sharing

Copy URL

Twitter E-mail

General

Target

a2e50c69b2d31247f9cd1097c76cb3818037b8ef7916ec6c2d8d87be78d17087
Size

1.7MB
MD5

2119612ba79ede6a4f2f207a3ab1e8d2
SHA1

ae572585520c4f8acedf000b11e91d31de9e03c1
SHA256

a2e50c69b2d31247f9cd1097c76cb3818037b8ef7916ec6c2d8d87be78d17087
SHA512

d15294c0da187517d78c891533a6b2519b4e14ed9a759cc8c3c075f08610839e3b7f5c9c6b402f2f596a8294f6069fe75c7fbbc96896941a5fac14b696c3ad5b
SSDEEP

24576:KWQTd7OD9JWUo1tslodIWZdFn8ruqomzWnc4y001W6KAccwRFWC9hCqIWnsMWW7f:0ajo1OlodHdR8rEmcF0jwrhCqR0cZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2e50c69b2d31247f9cd1097c76cb3818037b8ef7916ec6c2d8d87be78d17087

Files

a2e50c69b2d31247f9cd1097c76cb3818037b8ef7916ec6c2d8d87be78d17087
.exe windows:5 windows x86 arch:x86

610f5cf15dfdb3119f8a5206abb167c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LeaveCriticalSection
ExitProcess
EnterCriticalSection
InitializeCriticalSection
GetCommandLineW
GetVersion
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
SetSystemPowerState
LoadLibraryA
TlsGetValue
GetLastError
GetModuleHandleA
GetStartupInfoW
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetProcAddress
GetTickCount
GetStringTypeW
LCMapStringA
TlsSetValue
LCMapStringW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW

user32

ShowOwnedPopups
SetWindowTextW
SetWindowsHookExW
SetWindowRgn
SetWindowPos
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
MessageBoxA
SetWindowPlacement

gdi32

Rectangle

ole32

CoInitialize

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fixup
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

610f5cf15dfdb3119f8a5206abb167c8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 14.1MB

.tls Size: 512B - Virtual size: 12B

.fixup Size: 4KB - Virtual size: 3KB

.rsrc Size: 139KB - Virtual size: 139KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 14.1MB

.tls
Size: 512B - Virtual size: 12B

.fixup
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 139KB - Virtual size: 139KB