13417be0bc4e531480ab1af5612852c35786cfe9bfe49ef044afc4ccda0a87d1N

Sharing

Copy URL Twitter E-mail

General

Target

13417be0bc4e531480ab1af5612852c35786cfe9bfe49ef044afc4ccda0a87d1N
Size

533KB
MD5

fa37e94be7503279be742b531d896180
SHA1

45997f29c08bcf99c0e0acead8120025577ac48f
SHA256

13417be0bc4e531480ab1af5612852c35786cfe9bfe49ef044afc4ccda0a87d1
SHA512

7c5be96256f24ffb6025c6777e12865879e14f10ed6a664e9f85dab0887a4fb055ad5e3d4182de1878da07d1659ebc3c641359214fbcbf4086a28fccdc58df6f
SSDEEP

12288:4EC8N1/CpK+peUviS2MyxfR7G7p+LMJ+Bgqlk0n0EBO+:th/dfMytR5rlk0nx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13417be0bc4e531480ab1af5612852c35786cfe9bfe49ef044afc4ccda0a87d1N

Files

13417be0bc4e531480ab1af5612852c35786cfe9bfe49ef044afc4ccda0a87d1N
.exe windows:5 windows x86 arch:x86

e743939862e4cb2975303413d210e3ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetLastError
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
GetDriveTypeW
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
HeapFree
HeapAlloc
GetProcAddress
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetCurrentThread
GetConsoleCP
GetConsoleMode
GetStringTypeW
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
GetTimeZoneInformation
SetFilePointerEx
WriteConsoleW
FlushFileBuffers
HeapSize
SetEndOfFile
ReadFile
ReadConsoleW
EncodePointer
DecodePointer
RaiseException
HeapReAlloc
GetModuleHandleA

advapi32

SystemFunction036

Sections

.text
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e743939862e4cb2975303413d210e3ba

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 453KB - Virtual size: 452KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 44KB - Virtual size: 93KB

.text
Size: 453KB - Virtual size: 452KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 44KB - Virtual size: 93KB