5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e.exe
Size

629KB
MD5

9d987b63de67acf038bf01bbcc04b841
SHA1

698ecd6246528661cc8c165f80ab1683f12a4a82
SHA256

5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e
SHA512

d7165f777f68bff6aab918efb364da97910729e0acc40d76f6c69e542ca463ad475c70a459e0b4e3928bd931f2c0c8e2c99c69bfd0a2bbc81dc53a2d0a1e8af7
SSDEEP

12288:Iyrp+BMKJyLSGyFD3CRekI+vEe2DHdpEp42RIEmfvX3A:5rfMyLghSRe8v5u3Ee2ee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e.exe

Files

5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e.exe
.exe windows:5 windows x86 arch:x86

237b17b2e4a814f3a0a6b82394c41992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
SetComputerNameW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
GetNumberFormatA
GetConsoleAliasExesW
TlsSetValue
GetEnvironmentStrings
LoadLibraryW
GetLocaleInfoW
_hread
GetCalendarInfoW
SetVolumeMountPointA
CreateSemaphoreA
GetFileAttributesW
CreateActCtxA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
GetLastError
GetCurrentDirectoryW
CreateProcessW
EnumSystemCodePagesW
SetFileAttributesA
DefineDosDeviceA
GlobalFree
FindClose
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
FoldStringW
SetEnvironmentVariableA
GetModuleFileNameA
EnumDateFormatsA
GlobalUnWire
WaitForDebugEvent
OpenEventW
GetShortPathNameW
SetFileShortNameA
GetDiskFreeSpaceExA
GetVersionExA
ReadConsoleInputW
GetTempPathA
LocalFree
LCMapStringW
CommConfigDialogW
SetFilePointer
EnumCalendarInfoA
GetProcAddress
GetComputerNameA
CloseHandle
MultiByteToWideChar
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

gdi32

CreateDCA
GetCharWidth32A
GetCharWidthI

shell32

FindExecutableA

Sections

.text
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vavoy
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cog
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

237b17b2e4a814f3a0a6b82394c41992

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

shell32

Sections

.text Size: 506KB - Virtual size: 505KB

.data Size: 24KB - Virtual size: 70KB

.vavoy Size: 1024B - Virtual size: 1024B

.cog Size: 512B - Virtual size: 214B

.rsrc Size: 88KB - Virtual size: 87KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 506KB - Virtual size: 505KB

.data
Size: 24KB - Virtual size: 70KB

.vavoy
Size: 1024B - Virtual size: 1024B

.cog
Size: 512B - Virtual size: 214B

.rsrc
Size: 88KB - Virtual size: 87KB

.reloc
Size: 8KB - Virtual size: 7KB