ee2e5f6c3912ee2281912abca00e9fc32337efe10790a20e8b94d951a07b568f

Sharing

Copy URL Twitter E-mail

General

Target

ee2e5f6c3912ee2281912abca00e9fc32337efe10790a20e8b94d951a07b568f
Size

10.6MB
MD5

5947d98e45956b6b1ecb9967616af9ad
SHA1

4369ff3c49292fed46c60d98cc6e168241412676
SHA256

ee2e5f6c3912ee2281912abca00e9fc32337efe10790a20e8b94d951a07b568f
SHA512

3822692224aff9b1415403a69475d4f85b70679cff952dee726ce4aeee5d97422556a29ccecc7287f09fe06113160aa2029f41d48cbf9242b5b45699a8672ac5
SSDEEP

98304:iaBCYt4pA+xq4DwDTBxqeka0ecByoLZGqV0qRAh2PC7/FXAuDyRT:ZB5l+xq4sx+byQZ2qRAfdXAuIT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee2e5f6c3912ee2281912abca00e9fc32337efe10790a20e8b94d951a07b568f

Files

ee2e5f6c3912ee2281912abca00e9fc32337efe10790a20e8b94d951a07b568f
.exe windows:5 windows x86 arch:x86

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetProcAddress
LoadLibraryExW
SizeofResource
LockResource
LoadLibraryW
FindResourceW
WriteFile
GetModuleFileNameW
CreateFileW
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetTempPathW
GetFileAttributesW
GetCurrentDirectoryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
GetCurrentThreadId
Sleep
RaiseException
GetCommandLineW
SetFilePointerEx
FlushFileBuffers
FindFirstFileExW
FindNextFileW
FindClose
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleExW
GetVersionExW
GetNativeSystemInfo
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetEnvironmentVariableW
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
IsValidCodePage
GetDriveTypeW
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
HeapReAlloc
ExitProcess
HeapSize
GetFileType
SetStdHandle
GetFullPathNameW
GetConsoleMode
GetConsoleCP
LoadLibraryExA
HeapFree
LoadLibraryA
HeapAlloc
GetProcessHeap
IsBadReadPtr
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind

ole32

CoTaskMemFree

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ress
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d23a47fc48aa394ffabbc47bf80e799

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 3KB - Virtual size: 11KB

.gfids Size: 512B - Virtual size: 444B

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 8KB - Virtual size: 7KB

.ress Size: 10.5MB - Virtual size: 10.5MB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 3KB - Virtual size: 11KB

.gfids
Size: 512B - Virtual size: 444B

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 8KB - Virtual size: 7KB

.ress
Size: 10.5MB - Virtual size: 10.5MB