3ef11244d05c75c85f4cd7727c37394367bb1d4f3f91565e87f897048d61834c

Sharing

Copy URL Twitter E-mail

General

Target

3ef11244d05c75c85f4cd7727c37394367bb1d4f3f91565e87f897048d61834c
Size

444KB
MD5

93b205a66ee01fb7d2a65b1654bd4a6d
SHA1

003caa28a0f8a7b211014727b519f2b2fa77fae6
SHA256

3ef11244d05c75c85f4cd7727c37394367bb1d4f3f91565e87f897048d61834c
SHA512

b8cc01ac96d7094cc958b8736c64636483edeeaf28d72c77fd4463dc1aa186e99d8c8f709680259102ef8658fdeb76344c100800ad39e97d8478f171bfdc1605
SSDEEP

1536:3G1GBy+dEZvYwPx6Kyt07pMhgDb8m9cxlLavlLfDcLUj5knDXzt+HiOo:3G1e3xtlm8LuFbB2jt+CO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef11244d05c75c85f4cd7727c37394367bb1d4f3f91565e87f897048d61834c

Files

3ef11244d05c75c85f4cd7727c37394367bb1d4f3f91565e87f897048d61834c
.exe windows:4 windows x86 arch:x86

40cf658edfc6139e3cdd181bddb066b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetCurrentProcess
GetModuleFileNameA
GetWindowsDirectoryA
GetVersionExA
ExitProcess
Sleep
SetStdHandle
WriteConsoleW
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
HeapSize
WriteConsoleA
GetConsoleOutputCP

user32

EnumWindows

shell32

ShellExecuteExA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40cf658edfc6139e3cdd181bddb066b1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 77KB - Virtual size: 76KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 77KB - Virtual size: 76KB

.shell
Size: 320KB - Virtual size: 320KB