03e4223d89784ccdaf4997a751a7f64b1d4da9127b6dc1e4439643e8ea0a4dbf

Sharing

Copy URL Twitter E-mail

General

Target

03e4223d89784ccdaf4997a751a7f64b1d4da9127b6dc1e4439643e8ea0a4dbf
Size

239KB
MD5

90c9af05df8c479abf4d4fcb8d48c30a
SHA1

d4830d2f3642e0acebf666307e8757d6b357c34e
SHA256

03e4223d89784ccdaf4997a751a7f64b1d4da9127b6dc1e4439643e8ea0a4dbf
SHA512

ff2f5ef4d943467f69adfade8f82a13635c18b45d032f84c88b40264ee5fb673330ea4472b8cf0eb7f67175c8f0587fe85829b4226ccff5deab7c757c150e5f5
SSDEEP

3072:mUjUo2mtynQzFrWYbnnqoUc+DmBoXJ640FuzVvBdz0X6YuXF/g7X2jegx/TR4K:mUF2mtyQdWinTOt0SBdz0DuNEMLx/VD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e4223d89784ccdaf4997a751a7f64b1d4da9127b6dc1e4439643e8ea0a4dbf

Files

03e4223d89784ccdaf4997a751a7f64b1d4da9127b6dc1e4439643e8ea0a4dbf
.exe windows:6 windows x86 arch:x86

12bd3b1f5fc8c9769bdad31b90226a14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\AWork\_drw_main\SetupUE\Release\SetupUE.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
GetTimeZoneInformation
GetLocaleInfoW
GetCommandLineW
CloseHandle
GetModuleHandleW
CreateProcessW
GetModuleFileNameW
LocalFree
WriteConsoleW
DecodePointer
FlushFileBuffers
FreeLibrary
GetVersionExW
WaitForSingleObject
GetSystemInfo
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetStringTypeW
GetProcessHeap
CreateFileW

user32

GetSystemMetrics

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

CommandLineToArgvW

netapi32

NetWkstaGetInfo
NetApiBufferFree

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

12bd3b1f5fc8c9769bdad31b90226a14

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shell32

netapi32

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 116KB - Virtual size: 120KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 116KB - Virtual size: 120KB