03d922f691c556c806f0fbdaa6a48943f5e959754a658dac2a837dc366603efc

Sharing

Copy URL Twitter E-mail

General

Target

03d922f691c556c806f0fbdaa6a48943f5e959754a658dac2a837dc366603efc
Size

69KB
MD5

b1e1b1e52cdc4bec7b4dc9043cddace0
SHA1

b84a89acfcd7282874e7dff017dcfa6755e30fb3
SHA256

03d922f691c556c806f0fbdaa6a48943f5e959754a658dac2a837dc366603efc
SHA512

ac4f18a580b88d438861b63a00b8ea6552ea89d92467613b3fdd5b113d8b39030f6ddf5e36cbcb926f988355d0b0275b0829320499bcd7acfcf111f0f55e3dc5
SSDEEP

768:H3iAXknD6cA9UePT/DvwW6KclRIAW6XHpFH8U7L9fYfiEA0K5ar3TY55X801amg:SI7/IhIAW6XHp177L96jAh5a0am

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03d922f691c556c806f0fbdaa6a48943f5e959754a658dac2a837dc366603efc

Files

03d922f691c556c806f0fbdaa6a48943f5e959754a658dac2a837dc366603efc
.exe windows:6 windows x64 arch:x64

c765ffa0b5add1050ada7a5a19c97659

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetThreadContext
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
K32EnumProcessModules
K32EnumProcesses
K32GetModuleBaseNameW
LoadLibraryA
LoadLibraryExA
LocalFree
OpenProcess
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter

vcruntime140

__C_specific_handler
__current_exception
__current_exception_context
memcpy
memmove
memset

api-ms-win-crt-time-l1-1-0

_time64
clock

api-ms-win-crt-string-l1-1-0

_wcsicmp
strlen
strncpy

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
exit
terminate

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__stdio_common_vfprintf
__stdio_common_vsprintf
_set_fmode
puts

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-environment-l1-1-0

getenv

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c765ffa0b5add1050ada7a5a19c97659

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 5KB

.pdata Size: 1024B - Virtual size: 588B

.retplne Size: 512B - Virtual size: 140B

_RDATA Size: 4KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 5KB

.pdata
Size: 1024B - Virtual size: 588B

.retplne
Size: 512B - Virtual size: 140B

_RDATA
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB