f53665ac00534d65e9efc3b47c70f1d578287b614209aa3e8eff25edac9e4ddcN

Sharing

Copy URL

Twitter E-mail

General

Target

f53665ac00534d65e9efc3b47c70f1d578287b614209aa3e8eff25edac9e4ddcN
Size

1.2MB
MD5

8cbda19829b55e91ac63d4110b769f70
SHA1

2450ced6c47d06b67a1dfbdda80d28914ef2a2b9
SHA256

f53665ac00534d65e9efc3b47c70f1d578287b614209aa3e8eff25edac9e4ddc
SHA512

82d92b5de6840e3371dde40d6db4b73b3efe6757124fe0f7d4ea322bcf3536f5920b64acd177a334ad007b095418f5c69a355099793036425546b9a827de6b14
SSDEEP

12288:dxXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:dxsqjnhMgeiCl7G0nehbGZpbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f53665ac00534d65e9efc3b47c70f1d578287b614209aa3e8eff25edac9e4ddcN

Files

f53665ac00534d65e9efc3b47c70f1d578287b614209aa3e8eff25edac9e4ddcN
.exe windows:6 windows x64 arch:x64

138de15ddb84c64e98a594189851a217

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\zlib\zlib-1.3\contrib\vstudio\vc14\x64\MiniUnzipRelease\miniunz.pdb

Imports

zlibwapi

ord62
ord112
ord68
ord72
ord79
ord124
ord75
ord66
ord122
ord121

kernel32

GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
CreateFileA
GetFileTime
LocalFileTimeToFileTime
CloseHandle
DosDateTimeToFileTime
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId

vcruntime140

__C_specific_handler
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fclose
_set_fmode
__p__commode
fopen
__stdio_common_vfscanf
__stdio_common_vfprintf
fwrite

api-ms-win-crt-heap-l1-1-0

malloc
free
_set_new_mode

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_seh_filter_exe
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_errno
_initterm_e
_exit
terminate
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-filesystem-l1-1-0

_mkdir
_chdir

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

138de15ddb84c64e98a594189851a217

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

zlibwapi

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 200B

.pdata Size: 1024B - Virtual size: 528B

.reloc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 200B

.pdata
Size: 1024B - Virtual size: 528B

.reloc
Size: 1.2MB - Virtual size: 1.8MB