65d770686aa09acd6ab7d0f0fa5185b58144e9f70fdfc80366fc2f10aadffaf2N

Sharing

Copy URL Twitter E-mail

General

Target

65d770686aa09acd6ab7d0f0fa5185b58144e9f70fdfc80366fc2f10aadffaf2N
Size

424KB
MD5

97369fe6aaef469152c67a9f35db94c0
SHA1

5b34264746eb209d2a2f2a37f9ebd64777972711
SHA256

65d770686aa09acd6ab7d0f0fa5185b58144e9f70fdfc80366fc2f10aadffaf2
SHA512

e7979885733732eeb1660b7931063d5caa61d0adb9b4f7ca902cbbf23e0e75ef76eb2213ac974f88f3f6380af298246d659f9bfdf552c537b07147843a852537
SSDEEP

6144:XfkHiCObwQgTYR2NP61f/YqYKVNzCLYRJDBRKeTy:PkHt6SOsy132KVosRvM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65d770686aa09acd6ab7d0f0fa5185b58144e9f70fdfc80366fc2f10aadffaf2N

Files

65d770686aa09acd6ab7d0f0fa5185b58144e9f70fdfc80366fc2f10aadffaf2N
.exe windows:5 windows x86 arch:x86

9eefacf83d553309fed787be341d76f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
SetEnvironmentVariableW
SetVolumeMountPointW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
LocalFlags
GetNumberFormatA
ClearCommBreak
GetConsoleAliasExesW
GetEnvironmentStrings
LoadLibraryW
GetLocaleInfoW
_hread
GetCalendarInfoW
SetVolumeMountPointA
GetVersionExW
EnumSystemCodePagesA
CreateSemaphoreA
GetFileAttributesW
GetModuleFileNameW
CreateActCtxA
GetShortPathNameA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
InterlockedIncrement
GetLastError
GetCurrentDirectoryW
GetProcAddress
CopyFileA
SetComputerNameA
SetFileAttributesA
DefineDosDeviceA
GlobalFree
FindClose
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
OpenEventA
FoldStringW
SetEnvironmentVariableA
GlobalWire
GetModuleFileNameA
EnumDateFormatsA
GetShortPathNameW
SetFileShortNameA
GetDiskFreeSpaceExA
ReadConsoleInputW
DebugBreak
GetTempPathA
TlsFree
LCMapStringW
CreateProcessW
CommConfigDialogA
EnumCalendarInfoA
SetFilePointer
GetStdHandle
GetComputerNameA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
MultiByteToWideChar
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
HeapSize
ExitProcess
WriteFile
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetModuleHandleA
GetConsoleCP
GetConsoleMode

gdi32

CreateDCW
GetCharWidth32A
GetCharWidthI

advapi32

ReadEventLogW

ole32

CoSuspendClassObjects

winhttp

WinHttpOpen
WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend

Sections

.text
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tizubuf
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yahicek
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9eefacf83d553309fed787be341d76f9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

ole32

winhttp

msimg32

Sections

.text Size: 293KB - Virtual size: 293KB

.data Size: 24KB - Virtual size: 70KB

.tizubuf Size: 1024B - Virtual size: 1024B

.yahicek Size: 512B - Virtual size: 214B

.rsrc Size: 96KB - Virtual size: 96KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 293KB - Virtual size: 293KB

.data
Size: 24KB - Virtual size: 70KB

.tizubuf
Size: 1024B - Virtual size: 1024B

.yahicek
Size: 512B - Virtual size: 214B

.rsrc
Size: 96KB - Virtual size: 96KB

.reloc
Size: 7KB - Virtual size: 7KB