cfe279a9e9ebf9b9a0bb68a1261aa94d8e8f80e18204d647b0ed853845e1428b

Sharing

Copy URL

Twitter E-mail

General

Target

cfe279a9e9ebf9b9a0bb68a1261aa94d8e8f80e18204d647b0ed853845e1428b
Size

324KB
MD5

de39d38f871167ed066a9d6d3181e2c8
SHA1

c96c26fa89852023fc2d7b39e85c48898444cb90
SHA256

cfe279a9e9ebf9b9a0bb68a1261aa94d8e8f80e18204d647b0ed853845e1428b
SHA512

b7c6e893b2c730efd513cbf37dd2a00f87f67d8001f75ba423f992fb0c2e47f93e9ad35fc677ed1a35f60dffd54923480d9ddbe63ad19c7323bf2fe9cfdad5e1
SSDEEP

6144:rCou1DxtV+m2SpmzpOIfyUz/5KmQ4KfhrShNw0pAY/M0z0Vdh1tQ:S19tVd2SapOIfr/ol4Ahryw0pOVdz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfe279a9e9ebf9b9a0bb68a1261aa94d8e8f80e18204d647b0ed853845e1428b

Files

cfe279a9e9ebf9b9a0bb68a1261aa94d8e8f80e18204d647b0ed853845e1428b
.exe windows:5 windows x86 arch:x86

25b88c8808d12533e73c97c99943ea41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
FillConsoleOutputCharacterA
SearchPathW
GetConsoleAliasesLengthW
CopyFileExW
GetNumaProcessorNode
DebugActiveProcessStop
GetDefaultCommConfigW
CallNamedPipeA
WriteConsoleOutputW
HeapAlloc
InterlockedDecrement
GlobalSize
GetEnvironmentStringsW
CreateDirectoryW
GetSystemDefaultLCID
GetModuleHandleW
GetCommandLineA
GetSystemTimes
GlobalAlloc
LoadLibraryW
GetConsoleAliasExesLengthW
SetConsoleMode
GetFileAttributesW
GetBinaryTypeW
GetStartupInfoW
SetConsoleTitleA
GetShortPathNameA
InterlockedExchange
GetLastError
GetProcAddress
CopyFileA
SetStdHandle
EnterCriticalSection
BuildCommDCBW
GetNumaHighestNodeNumber
OpenWaitableTimerA
LoadLibraryA
UnhandledExceptionFilter
WritePrivateProfileStringA
QueryDosDeviceW
VirtualLock
FoldStringA
GetModuleFileNameA
FreeEnvironmentStringsW
SetCalendarInfoA
FindAtomW
SetFilePointer
WriteConsoleW
EncodePointer
DecodePointer
MultiByteToWideChar
ExitProcess
GetCommandLineW
HeapSetInformation
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
Sleep
HeapSize
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WriteFile
GetStdHandle
GetModuleFileNameW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
RtlUnwind
HeapReAlloc
WideCharToMultiByte
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
IsProcessorFeaturePresent
ReadFile
CloseHandle
CreateFileW

user32

GetUserObjectInformationW

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25b88c8808d12533e73c97c99943ea41

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 6KB - Virtual size: 20KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 117KB - Virtual size: 116KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 6KB - Virtual size: 20KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 117KB - Virtual size: 116KB