9920ce73ec6d23bb3aac31559a395bd4519ed9e012e6312b83f09ab89af99f5dN

Sharing

Copy URL Twitter E-mail

General

Target

9920ce73ec6d23bb3aac31559a395bd4519ed9e012e6312b83f09ab89af99f5dN
Size

219KB
MD5

e45f5d25c1702f185265fe72f7a0da80
SHA1

c7a3962f7fddf71a99305cc51db4aa36e7247a6d
SHA256

9920ce73ec6d23bb3aac31559a395bd4519ed9e012e6312b83f09ab89af99f5d
SHA512

5141c804c19b4cfdbffba463ec59021db79538a095c9c473e09235798e587a81e76e1407eb1aeb51836b1798f67362740b86f64b90d227e88adc3a45c4f98b16
SSDEEP

3072:qKLvfpyiqkvahzEO02A538Ewv6ClhJ3W5Ea3oIE:qKLnAkvAzE2HRGo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9920ce73ec6d23bb3aac31559a395bd4519ed9e012e6312b83f09ab89af99f5dN

Files

9920ce73ec6d23bb3aac31559a395bd4519ed9e012e6312b83f09ab89af99f5dN
.exe windows:5 windows x86 arch:x86

496dfe13db1db9baba20fd0a8f77624e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathW
GetConsoleAliasesLengthW
GetNumaProcessorNode
GetDefaultCommConfigW
GetCommState
InterlockedDecrement
QueryDosDeviceA
GetEnvironmentStringsW
InterlockedCompareExchange
GetComputerNameW
GetTimeFormatA
ConnectNamedPipe
GetModuleHandleW
ReadConsoleW
ReadConsoleOutputA
SetCommState
GetPriorityClass
LoadLibraryW
CopyFileW
GetConsoleAliasExesLengthW
FormatMessageW
GetSystemTimeAdjustment
DeleteVolumeMountPointW
HeapDestroy
SetConsoleMode
GetFileAttributesW
GetBinaryTypeA
GetShortPathNameA
GetLastError
GetLongPathNameW
GetProcAddress
SetStdHandle
LoadLibraryA
LocalAlloc
MoveFileA
FindAtomA
GetModuleFileNameA
FreeEnvironmentStringsW
BuildCommDCBA
FatalAppExitA
WriteConsoleOutputAttribute
ReleaseMutex
GetVolumeInformationW
HeapFree
HeapAlloc
HeapReAlloc
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetFocus

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 991KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pem
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.muxofel
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

496dfe13db1db9baba20fd0a8f77624e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 991KB

.pem Size: 512B - Virtual size: 124B

.tls Size: 1KB - Virtual size: 1KB

.muxofel Size: 1024B - Virtual size: 1024B

.rsrc Size: 118KB - Virtual size: 118KB

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 991KB

.pem
Size: 512B - Virtual size: 124B

.tls
Size: 1KB - Virtual size: 1KB

.muxofel
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 118KB - Virtual size: 118KB