bfae7a9df35474b49b510eed831a79cd93eaa3072897f34590156a5ae72395cc

General

Target

bfae7a9df35474b49b510eed831a79cd93eaa3072897f34590156a5ae72395cc
Size

368KB
MD5

7f5e51c781ddf25f8b8cbc258816f560
SHA1

060e8706fc2befee2248a243cb091b873f99975a
SHA256

bfae7a9df35474b49b510eed831a79cd93eaa3072897f34590156a5ae72395cc
SHA512

f260586b2509b5b8c0ee8b1922ba5c612ab832904d88bb49cb69c2944f1e3ced6a8390ecfd29f0a71b27de8224ddbf6210725013e7520d3e228fe51e84cdf6e0
SSDEEP

768:EHwHDb1LwJlcotHH7EIfoTmMhUixwIldYsHU3+AXBD9hWHTJonZdVMQBCtooIiu:Owj51oRHzgT5Llms0RXdIorVMQWojiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfae7a9df35474b49b510eed831a79cd93eaa3072897f34590156a5ae72395cc

Files

bfae7a9df35474b49b510eed831a79cd93eaa3072897f34590156a5ae72395cc
.exe windows:4 windows x86 arch:x86

bb801224abd8562f9ee8fb261b75e32a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
CloseHandle
ReadFile
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CreateFileW
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
LCMapStringA
LCMapStringW

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb801224abd8562f9ee8fb261b75e32a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 14KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 14KB

.shell
Size: 320KB - Virtual size: 320KB