d1d3a0d859c28114ea6b74e65ba1a0d0N

Sharing

Copy URL Twitter E-mail

General

Target

d1d3a0d859c28114ea6b74e65ba1a0d0N
Size

86KB
MD5

d1d3a0d859c28114ea6b74e65ba1a0d0
SHA1

fa4be4f2630bfe3f93260da7af2fc434450645fa
SHA256

e66f8be5479ca54ae18ecff4ab64819939acf667346a0ff99b53085f27e3d38b
SHA512

06944945769e345908d52f54a37b50849482ef2ac5d53eed01672a0ea584e295e4bf28d511f818faa7d5a93687612db07bfedb11814c89ac0ff4b3913c126ef7
SSDEEP

1536:hCK7fTWyWX2J8rR6ewYJLeU1dczgkMPlJCwesEvr2R3VwEFCU3ZkV46SXh:bvWyTJO6KF/tkFgEwZf2l0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1d3a0d859c28114ea6b74e65ba1a0d0N

Files

d1d3a0d859c28114ea6b74e65ba1a0d0N
.exe windows:5 windows x86 arch:x86

4767f24abebc7a9b6cbf237ce9acb6ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp60

?pubimbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??_Fbad_exception@std@@QAEXXZ
?transform@?$collate@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@PBG0@Z
?cos@std@@YA?AV?$complex@O@1@ABV21@@Z
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
_Stold
??_7?$numpunct@G@std@@6B@
??0?$messages@D@std@@QAE@I@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?_Fabs@std@@YAOABV?$complex@O@1@PAH@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z

gdi32

Pie
EngComputeGlyphSet
CreateSolidBrush
RectInRegion
UnloadNetworkFonts
DdEntry10
GdiEntry1
GdiAddFontResourceW
PlayMetaFile
PolyDraw
CreateCompatibleBitmap
CreatePatternBrush
DdEntry37
ExtCreateRegion
GdiGetCodePage
GdiComment
GetPaletteEntries
SetEnhMetaFileBits
SetViewportExtEx

kernel32

GetConsoleAliasExesLengthW
GetTickCount
FindFirstChangeNotificationA
GetTapePosition
WritePrivateProfileStructW
LoadLibraryA
ReadConsoleOutputW
HeapCreate
InitializeSListHead
GetModuleHandleExW
ContinueDebugEvent
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentProcessId
GetVolumeNameForVolumeMountPointA
QueryPerformanceCounter
GetModuleHandleW
CallNamedPipeW
SetConsoleScreenBufferSize
RegisterWaitForSingleObject
CreateJobObjectW
GetProcAddress
GetNumaProcessorNode
VirtualProtect
GetCurrentThreadId

msi

MsiEnumFeaturesW
MsiInstallProductA
MsiSummaryInfoGetPropertyA
MsiEnumComponentCostsA
MsiProcessAdvertiseScriptA
MsiGetComponentStateW
MsiEnumComponentQualifiersW
MsiGetTargetPathW
MsiApplyPatchW
MsiGetLanguage

msvcrt20

bsearch
_wcreat
_putws
puts
_mbsncat
??0filebuf@@QAE@HPADH@Z
sscanf
_acmdln
_findnext
_fcloseall
strspn
??_Gistrstream@@UAEPAXI@Z
_CIexp
_initterm
_isnan
_mbctokata
wcsxfrm
__p__osver
_XcptFilter
??_Gistream_withassign@@UAEPAXI@Z

rpcrt4

NdrFixedArrayMarshall
NdrOutInit
RpcRaiseException
RpcCancelThreadEx
RpcMgmtEnableIdleCleanup
RpcSmSwapClientAllocFree
tree_into_ndr
NdrXmitOrRepAsMarshall
NdrNonConformantStringBufferSize
RpcErrorResetEnumeration
NdrMapCommAndFaultStatus
SimpleTypeMemorySize
NdrConformantStringBufferSize

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4767f24abebc7a9b6cbf237ce9acb6ba

Headers

DLL Characteristics

File Characteristics

Imports

msvcp60

gdi32

kernel32

msi

msvcrt20

rpcrt4

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 48KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 292B

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 48KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 292B