ee1964ce303ececff03de617b11c07deaa8a1d05498e6d6927f600a62fc1bea9N

Sharing

Copy URL Twitter E-mail

General

Target

ee1964ce303ececff03de617b11c07deaa8a1d05498e6d6927f600a62fc1bea9N
Size

276KB
MD5

12551ca3f607884a2a63e2f23fb49620
SHA1

d7323d3edf0af26cd98f137f4f168f13b9b589a3
SHA256

ee1964ce303ececff03de617b11c07deaa8a1d05498e6d6927f600a62fc1bea9
SHA512

0fca1843be9b791252b26c7b96306c043c11cba4f63826ed1424afaf75574dccb702b433ef780475b2c86149ad1fde0bf8799f2b0ee36a69e8e0eb4c9635f84d
SSDEEP

3072:mLk59NDG5M+y/4FjhwrNbc6Nb4MtprVSgS+ydFjC9ix5GCT5+aSLwJ/cEXot4W:mLy9dG5hy/CNwrNoirpScWVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee1964ce303ececff03de617b11c07deaa8a1d05498e6d6927f600a62fc1bea9N

Files

ee1964ce303ececff03de617b11c07deaa8a1d05498e6d6927f600a62fc1bea9N
.exe windows:5 windows x86 arch:x86

97babc4c8c35b611714c9e422ebf997c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcess
FillConsoleOutputCharacterA
SearchPathW
SetPriorityClass
GetConsoleAliasesLengthW
CopyFileExW
GetNumaProcessorNode
GetDefaultCommConfigW
CallNamedPipeA
InterlockedIncrement
GetEnvironmentStringsW
CreateDirectoryW
GetUserDefaultLCID
GetComputerNameW
SetCommBreak
ConnectNamedPipe
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
GetCommandLineA
LoadLibraryW
GetConsoleMode
Sleep
GetConsoleAliasExesLengthW
WriteConsoleOutputA
HeapCreate
GetFileAttributesW
GetBinaryTypeA
GetModuleFileNameW
SetConsoleTitleA
InterlockedExchange
GetStartupInfoA
GetLastError
GetProcAddress
SetStdHandle
SearchPathA
OpenWaitableTimerW
LocalAlloc
SetCalendarInfoW
BeginUpdateResourceA
QueryDosDeviceW
FoldStringW
WaitForMultipleObjects
GetModuleHandleA
BuildCommDCBA
GetShortPathNameW
FindAtomW
GlobalReAlloc
GetVolumeInformationW
CreateFileA
SetFilePointer
WriteConsoleW
HeapFree
HeapAlloc
MultiByteToWideChar
HeapReAlloc
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
CloseHandle

user32

SetFocus
GetUserObjectInformationA

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 995KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97babc4c8c35b611714c9e422ebf997c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 136KB - Virtual size: 136KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 995KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 122KB - Virtual size: 121KB

.text
Size: 136KB - Virtual size: 136KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 995KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 122KB - Virtual size: 121KB