df3186d6f9b1c0df5c8f7de6c63510800804ac338ccf01f2cc92d255c2a09867N

Sharing

Copy URL

Twitter E-mail

General

Target

df3186d6f9b1c0df5c8f7de6c63510800804ac338ccf01f2cc92d255c2a09867N
Size

417KB
MD5

6b119cedfbafe757cae1d6b8688e0f70
SHA1

a9ab3bfaa8f7492e16c1d5881935eb7d13b3ebf5
SHA256

df3186d6f9b1c0df5c8f7de6c63510800804ac338ccf01f2cc92d255c2a09867
SHA512

0f94ba40195109c1b80f5003a33a1541319b7f81d833afd9eeb78099369759d4e1162522c62a866c89e33903a2e96a8b4e2fa4c49ccf8b14bf21f35bffb7f654
SSDEEP

6144:y8kV59XzQ23Po5M3ptnR9EaMD4INaLihrvbenU:s5awP8M3ptktrauJv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df3186d6f9b1c0df5c8f7de6c63510800804ac338ccf01f2cc92d255c2a09867N

Files

df3186d6f9b1c0df5c8f7de6c63510800804ac338ccf01f2cc92d255c2a09867N
.exe windows:5 windows x86 arch:x86

237b17b2e4a814f3a0a6b82394c41992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
SetComputerNameW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
GetNumberFormatA
GetConsoleAliasExesW
TlsSetValue
GetEnvironmentStrings
LoadLibraryW
GetLocaleInfoW
_hread
GetCalendarInfoW
SetVolumeMountPointA
CreateSemaphoreA
GetFileAttributesW
CreateActCtxA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
GetLastError
GetCurrentDirectoryW
CreateProcessW
EnumSystemCodePagesW
SetFileAttributesA
DefineDosDeviceA
GlobalFree
FindClose
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
FoldStringW
SetEnvironmentVariableA
GetModuleFileNameA
EnumDateFormatsA
GlobalUnWire
WaitForDebugEvent
OpenEventW
GetShortPathNameW
SetFileShortNameA
GetDiskFreeSpaceExA
GetVersionExA
ReadConsoleInputW
GetTempPathA
LocalFree
LCMapStringW
CommConfigDialogW
SetFilePointer
EnumCalendarInfoA
GetProcAddress
GetComputerNameA
CloseHandle
MultiByteToWideChar
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

gdi32

CreateDCA
GetCharWidth32A
GetCharWidthI

shell32

FindExecutableA

Sections

.text
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lus
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wey
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

237b17b2e4a814f3a0a6b82394c41992

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

shell32

Sections

.text Size: 295KB - Virtual size: 294KB

.data Size: 24KB - Virtual size: 70KB

.lus Size: 1024B - Virtual size: 1024B

.wey Size: 512B - Virtual size: 214B

.rsrc Size: 88KB - Virtual size: 2.0MB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 295KB - Virtual size: 294KB

.data
Size: 24KB - Virtual size: 70KB

.lus
Size: 1024B - Virtual size: 1024B

.wey
Size: 512B - Virtual size: 214B

.rsrc
Size: 88KB - Virtual size: 2.0MB

.reloc
Size: 7KB - Virtual size: 7KB