cf03da855b6e60d43d4e12fc1fded81c95e0af56c6a4783b8d6fb949d7507abc

Sharing

Copy URL Twitter E-mail

General

Target

cf03da855b6e60d43d4e12fc1fded81c95e0af56c6a4783b8d6fb949d7507abc
Size

283KB
MD5

87b8342a56c5e354e069c334e434b4ff
SHA1

db3390dae553732a8ed0f00a1877c2685b62810a
SHA256

cf03da855b6e60d43d4e12fc1fded81c95e0af56c6a4783b8d6fb949d7507abc
SHA512

74a220b4799924dd6e9414b323e6e1f3d236054a86ed19b9544fd4f00a7a76e449495404a175ecb998a94a5131ea6f75b8aa2c64c946eb065a3d33d14e420a2f
SSDEEP

3072:ClitKNb9WwHWaBHrprhlj+VMCIlMpyM0NBHkEkv8yflIjMKIwu+uKalNusdhG:MitMb8w2cprTKViQy7PDqDRwu+uB7uY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf03da855b6e60d43d4e12fc1fded81c95e0af56c6a4783b8d6fb949d7507abc

Files

cf03da855b6e60d43d4e12fc1fded81c95e0af56c6a4783b8d6fb949d7507abc
.exe windows:5 windows x86 arch:x86

1442eede5811e610ea130a3bd7d5b0f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
SearchPathW
SetPriorityClass
GetNumaProcessorNode
GetConsoleAliasExesLengthA
InterlockedIncrement
OpenJobObjectA
QueryDosDeviceA
GetComputerNameW
CallNamedPipeW
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GetConsoleAliasesLengthA
GetUserDefaultLangID
GetEnvironmentStrings
LoadLibraryW
GetConsoleMode
Sleep
CopyFileW
WriteConsoleOutputA
HeapDestroy
GetFileAttributesA
GlobalFlags
GetBinaryTypeA
GetModuleFileNameW
GetStartupInfoW
WritePrivateProfileStringW
DisconnectNamedPipe
GetCommandLineW
GetConsoleAliasesW
FillConsoleOutputCharacterW
GetLastError
GetProcAddress
SetStdHandle
EnterCriticalSection
SearchPathA
BuildCommDCBW
LoadLibraryA
InterlockedExchangeAdd
OpenWaitableTimerW
LocalAlloc
FoldStringW
GetModuleFileNameA
GetDefaultCommConfigA
SetConsoleTitleW
GetShortPathNameW
SetCalendarInfoA
FindAtomW
GlobalReAlloc
SetFileAttributesW
CopyFileExA
GetVolumeInformationW
CreateFileW
SetFilePointer
CloseHandle
CreateDirectoryA
DebugActiveProcess
HeapAlloc
EncodePointer
DecodePointer
MultiByteToWideChar
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
HeapCreate
HeapSize
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
HeapReAlloc
RtlUnwind
WideCharToMultiByte
LCMapStringW
GetStringTypeW
HeapFree
IsProcessorFeaturePresent
GetConsoleCP
FlushFileBuffers
WriteConsoleW

user32

SetFocus
GetUserObjectInformationA

advapi32

RegCreateKeyA

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 35.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1442eede5811e610ea130a3bd7d5b0f0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 129KB - Virtual size: 129KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 5KB - Virtual size: 35.3MB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 135KB - Virtual size: 135KB

.text
Size: 129KB - Virtual size: 129KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 5KB - Virtual size: 35.3MB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 135KB - Virtual size: 135KB