23c598638e9cd7dd88371e0d4dd54af850a49bc927358f025ad77a273824fc8c

Sharing

Copy URL

Twitter E-mail

General

Target

23c598638e9cd7dd88371e0d4dd54af850a49bc927358f025ad77a273824fc8c
Size

319KB
MD5

26c9604944e633f1ad83e4538a705eed
SHA1

376bbfee7a15485a9233c4f704fe421f0a9972eb
SHA256

23c598638e9cd7dd88371e0d4dd54af850a49bc927358f025ad77a273824fc8c
SHA512

bf4aa84066aae2a981578eecd2a092be1633c13fd768ef2d369f5027420d062c4ff1706b3b64908914c4efaaa1f9c5d2fae94ba1c197ca738ae26b28ce978b2c
SSDEEP

6144:ztndDj9Oii1BeiJuEYxMielQty/NIf0hiX3wQw9L6wgFW8d:RpROiKcioMxlcKNc0cUFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c598638e9cd7dd88371e0d4dd54af850a49bc927358f025ad77a273824fc8c

Files

23c598638e9cd7dd88371e0d4dd54af850a49bc927358f025ad77a273824fc8c
.dll windows:4 windows x86 arch:x86

4e01383cfdf09ecd48c4208ca49ce9cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
Sleep
ExitProcess
CloseHandle
CreateThread
FreeLibrary
DisableThreadLibraryCalls
lstrcpyA
VirtualAlloc
VirtualQuery
HeapAlloc
GetProcessHeap
RtlUnwind
HeapReAlloc
GetCommandLineA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
VirtualFree
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e01383cfdf09ecd48c4208ca49ce9cb

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 12KB

.rsrc Size: 273KB - Virtual size: 273KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 273KB - Virtual size: 273KB

.reloc
Size: 4KB - Virtual size: 4KB