df5c0d787de9cc7dceeec3e34575220d831b5c8aeef2209bcd81f58c8b3c08ed

Sharing

Copy URL Twitter E-mail

General

Target

df5c0d787de9cc7dceeec3e34575220d831b5c8aeef2209bcd81f58c8b3c08ed
Size

410KB
MD5

6edc889abbc186fbd5e187818d916dee
SHA1

260c1f7412a763cd84bf94cb4db347730b858d8d
SHA256

df5c0d787de9cc7dceeec3e34575220d831b5c8aeef2209bcd81f58c8b3c08ed
SHA512

6926f4a3a1c72947b5af4f6efb7409e2ed8766057524e1657f65a74e44c837e784bae913c30408cc39d20a0ca3431da9e579e39629322977ac9a60a89bdadaaf
SSDEEP

12288:0mHdq3hVhS/qxOsmPeGf5JaFukRHIB+5cn7J1ND:X9KbhS/tsmPeGf5JaFukpIB+G7Jj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df5c0d787de9cc7dceeec3e34575220d831b5c8aeef2209bcd81f58c8b3c08ed

Files

df5c0d787de9cc7dceeec3e34575220d831b5c8aeef2209bcd81f58c8b3c08ed
.exe windows:6 windows x86 arch:x86

e9a244fcb52258a02872d5a317f332b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\DRIVE_Y\EDRIVE\repos\Miyav1.1_client_msi\Release\Miya1.1_client.pdb

Imports

kernel32

PeekNamedPipe
FindClose
GetVolumeInformationA
Sleep
GetLastError
FileTimeToSystemTime
GetProcAddress
GetComputerNameW
SetConsoleCP
GetEnvironmentVariableW
SetThreadExecutionState
GetModuleHandleW
WideCharToMultiByte
SetConsoleOutputCP
GetDiskFreeSpaceExA
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
CreatePipe
GetProductInfo
GetModuleFileNameW
GetDriveTypeA
TerminateProcess
WriteFile
FindNextFileW
GetLogicalDrives
FindFirstFileW
CreateProcessW
ReadFile
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
GetCurrentThreadId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
CloseHandle
WaitForSingleObjectEx
GetExitCodeThread
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
WakeAllConditionVariable
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
DeleteFileW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
GetFileSizeEx
SetFilePointerEx
GetFileType
HeapAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
HeapReAlloc
GetTimeZoneInformation
SetEndOfFile

user32

ReleaseDC
GetDC
EnumDisplaySettingsW

gdi32

CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
StretchBlt
GetDIBits
DeleteDC
DeleteObject
BitBlt

advapi32

GetUserNameW

ws2_32

WSASocketW
recv
WSAGetLastError
WSAConnectByNameW
select
WSACleanup
WSAStartup
closesocket
send

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9a244fcb52258a02872d5a317f332b2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

ws2_32

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 61KB - Virtual size: 61KB

.data Size: 7KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 61KB - Virtual size: 61KB

.data
Size: 7KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 14KB - Virtual size: 14KB