661d1fe9902109bb8bec961dcde8e944[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

661d1fe9902109bb8bec961dcde8e944.exe
Size

424KB
MD5

661d1fe9902109bb8bec961dcde8e944
SHA1

ecb24ebb86b75a502f4cb3d90e84bea2f0f4d56c
SHA256

6dae626cd4840dddef5d9581045fbd59b761fa0df26746e29f4d7994d816369a
SHA512

9629803b875554c493a019db5a3502757a498434ba39c23f16961c7aac16131d48529285ff82ddbd46d1c1a8cf9dc4e263cc968050b7e348a569139675dc2fe0
SSDEEP

6144:CzcuRqKnoKvcEbxJODkS91cSWV1mdG5D8LHXXKXBeTy:gkKPtJekSzSKsKjXOB2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661d1fe9902109bb8bec961dcde8e944.exe

Files

661d1fe9902109bb8bec961dcde8e944.exe
.exe windows:5 windows x86 arch:x86

9eefacf83d553309fed787be341d76f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
SetEnvironmentVariableW
SetVolumeMountPointW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
LocalFlags
GetNumberFormatA
ClearCommBreak
GetConsoleAliasExesW
GetEnvironmentStrings
LoadLibraryW
GetLocaleInfoW
_hread
GetCalendarInfoW
SetVolumeMountPointA
GetVersionExW
EnumSystemCodePagesA
CreateSemaphoreA
GetFileAttributesW
GetModuleFileNameW
CreateActCtxA
GetShortPathNameA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
InterlockedIncrement
GetLastError
GetCurrentDirectoryW
GetProcAddress
CopyFileA
SetComputerNameA
SetFileAttributesA
DefineDosDeviceA
GlobalFree
FindClose
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
OpenEventA
FoldStringW
SetEnvironmentVariableA
GlobalWire
GetModuleFileNameA
EnumDateFormatsA
GetShortPathNameW
SetFileShortNameA
GetDiskFreeSpaceExA
ReadConsoleInputW
DebugBreak
GetTempPathA
TlsFree
LCMapStringW
CreateProcessW
CommConfigDialogA
EnumCalendarInfoA
SetFilePointer
GetStdHandle
GetComputerNameA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
MultiByteToWideChar
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
HeapSize
ExitProcess
WriteFile
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetModuleHandleA
GetConsoleCP
GetConsoleMode

gdi32

CreateDCW
GetCharWidth32A
GetCharWidthI

advapi32

ReadEventLogW

ole32

CoSuspendClassObjects

winhttp

WinHttpOpen
WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rah
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zivu
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9eefacf83d553309fed787be341d76f9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

ole32

winhttp

msimg32

Sections

.text Size: 294KB - Virtual size: 293KB

.data Size: 24KB - Virtual size: 70KB

.rah Size: 1024B - Virtual size: 1024B

.zivu Size: 512B - Virtual size: 214B

.rsrc Size: 96KB - Virtual size: 96KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 294KB - Virtual size: 293KB

.data
Size: 24KB - Virtual size: 70KB

.rah
Size: 1024B - Virtual size: 1024B

.zivu
Size: 512B - Virtual size: 214B

.rsrc
Size: 96KB - Virtual size: 96KB

.reloc
Size: 7KB - Virtual size: 7KB