dc978b02aa833623b0b2449a9601132c121c938d6d15b17e8c2c000ca3b46a11

Sharing

Copy URL

Twitter E-mail

General

Target

dc978b02aa833623b0b2449a9601132c121c938d6d15b17e8c2c000ca3b46a11
Size

6.4MB
MD5

db1de224c27836183bae59aaf7e55f29
SHA1

9720d8cd9373cc5be4de55d1faece885788df1cd
SHA256

dc978b02aa833623b0b2449a9601132c121c938d6d15b17e8c2c000ca3b46a11
SHA512

442c00a6f813dd9e295ad1138aa96b14fe6d5c7736310078e08544d9a06f9de2d245294a089591967c5bf264f247b2776d0873ead294dd7002a2d5aaf31dbbc2
SSDEEP

98304:gsQHLtgS7511s9/XcHgBd9kWmaQRNoWHy1SHER2WSfyL0yi/JnpuDW9yG1CSjUwn:gseRgS13W/XZhmakXS2W/kRgdMpw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc978b02aa833623b0b2449a9601132c121c938d6d15b17e8c2c000ca3b46a11

Files

dc978b02aa833623b0b2449a9601132c121c938d6d15b17e8c2c000ca3b46a11
.exe windows:4 windows x86 arch:x86

4f3eb218f5117152444b5a7a0671d89d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 1.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 68KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 53KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 45KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f3eb218f5117152444b5a7a0671d89d

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 1.4MB - Virtual size: 3.4MB

1 Size: 68KB - Virtual size: 248KB

2 Size: 53KB - Virtual size: 1.6MB

3 Size: 28KB - Virtual size: 28KB

4 Size: 3KB - Virtual size: 8KB

5 Size: 512B - Virtual size: 4KB

6 Size: 45KB - Virtual size: 69KB

7 Size: 3KB - Virtual size: 3KB

8 Size: 7KB - Virtual size: 28KB

0
Size: 1.4MB - Virtual size: 3.4MB

1
Size: 68KB - Virtual size: 248KB

2
Size: 53KB - Virtual size: 1.6MB

3
Size: 28KB - Virtual size: 28KB

4
Size: 3KB - Virtual size: 8KB

5
Size: 512B - Virtual size: 4KB

6
Size: 45KB - Virtual size: 69KB

7
Size: 3KB - Virtual size: 3KB

8
Size: 7KB - Virtual size: 28KB