c739e4c8faea96b6cb524ea46f9bcbbeb381cdbcdc53cca4e4ddb89c659aef8e

Sharing

Copy URL Twitter E-mail

General

Target

c739e4c8faea96b6cb524ea46f9bcbbeb381cdbcdc53cca4e4ddb89c659aef8e
Size

1.6MB
MD5

0b089bcf062853285234c1f0cdaaf26f
SHA1

cc748b8a74de53d8630c5987b789af09a82d6279
SHA256

c739e4c8faea96b6cb524ea46f9bcbbeb381cdbcdc53cca4e4ddb89c659aef8e
SHA512

a9cbaf4f43a5ba1a68877d73b1d174c3e4dd2d1965327889bf9a3e82ba2b12d9d460e0c78c67dc2d3d779c4ba0b6e3b19db98d224c750be1bd8d71e8c1e5ae41
SSDEEP

24576:AWvxdtFi9WXI56LmWdYYfZm9iWtYTA85+pzWqARR91qHDWCmvX9Wn96WLxR613mx:ZxdHixafZwMP2ARjQXosxR+3mf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c739e4c8faea96b6cb524ea46f9bcbbeb381cdbcdc53cca4e4ddb89c659aef8e

Files

c739e4c8faea96b6cb524ea46f9bcbbeb381cdbcdc53cca4e4ddb89c659aef8e
.exe windows:5 windows x86 arch:x86

63cc030d34ea822207261ca9c2eea4d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
ExitProcess
EnterCriticalSection
InitializeCriticalSection
GetCommandLineW
GetVersion
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SetSystemPowerState
LoadLibraryA
SystemTimeToFileTime
GetLastError
GetModuleHandleA
GetStartupInfoW
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetProcAddress
GetTickCount
GetStringTypeW
LCMapStringA
SystemTimeToTzSpecificLocalTime
LCMapStringW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

SetWindowsHookExW
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetForegroundWindow
SetFocus
SetCursorPos
MessageBoxW
SetScrollPos

gdi32

Rectangle

ole32

CoInitialize

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fixup
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63cc030d34ea822207261ca9c2eea4d3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 14.1MB

.tls Size: 512B - Virtual size: 12B

.fixup Size: 3KB - Virtual size: 3KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 14.1MB

.tls
Size: 512B - Virtual size: 12B

.fixup
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 20KB - Virtual size: 20KB