94690b4023d96460d2be5a15fe5d5805c34b0a13aeec9aa459789f4759434b19N

Sharing

Copy URL Twitter E-mail

General

Target

94690b4023d96460d2be5a15fe5d5805c34b0a13aeec9aa459789f4759434b19N
Size

73KB
MD5

9b30aaf92ff255f8b60bbc92199885f0
SHA1

3d0a2032b50fea4daf64992d7095f42d006e5fd1
SHA256

94690b4023d96460d2be5a15fe5d5805c34b0a13aeec9aa459789f4759434b19
SHA512

a2eb4ac36b01d1e8423d33b031a2691ca46120fd4ee655e999f759d5b4b1fc79f03fed34eacde3568b53eddf994c5c3e7602af970d9eec1b0b46b50cc3b66d5f
SSDEEP

1536:W3ygFnOWRL1/rMK20XlOQFRij5Puc5uDjaA/REuFZ7fBtX3wCj9FRV5Dwjr/TKTh:6RL1/oKDVOQFRiUccZA8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94690b4023d96460d2be5a15fe5d5805c34b0a13aeec9aa459789f4759434b19N

Files

94690b4023d96460d2be5a15fe5d5805c34b0a13aeec9aa459789f4759434b19N
.exe windows:4 windows x64 arch:x64

09156920a7ea1d40c9a04575a7efdb91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
__C_specific_handler

msvcrt

__initenv
__iob_func
__getmainargs
__lconv_init
__set_app_type
_acmdln
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
memcpy
memset
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
signal
strlen
strncmp
vfprintf

libstdc++-6

_ZNSirsERx
_ZNSolsEPFRSoS_E
_ZNSolsEx
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt3cin
_ZSt4cout
_ZSt4endlIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 384B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09156920a7ea1d40c9a04575a7efdb91

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libstdc++-6

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 2KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 648B

.xdata Size: 1024B - Virtual size: 656B

.bss Size: - Virtual size: 384B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 140B

/4 Size: 512B - Virtual size: 48B

/19 Size: 18KB - Virtual size: 17KB

/31 Size: 2KB - Virtual size: 1KB

/45 Size: 1024B - Virtual size: 537B

/57 Size: 512B - Virtual size: 248B

/70 Size: 512B - Virtual size: 152B

/81 Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 648B

.xdata
Size: 1024B - Virtual size: 656B

.bss
Size: - Virtual size: 384B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 140B

/4
Size: 512B - Virtual size: 48B

/19
Size: 18KB - Virtual size: 17KB

/31
Size: 2KB - Virtual size: 1KB

/45
Size: 1024B - Virtual size: 537B

/57
Size: 512B - Virtual size: 248B

/70
Size: 512B - Virtual size: 152B

/81
Size: 2KB - Virtual size: 1KB