0994e0972430f7cf02b66c290b6e62666c14da2ca9ad369e7cf5447313dc8550

Sharing

Copy URL

Twitter E-mail

General

Target

0994e0972430f7cf02b66c290b6e62666c14da2ca9ad369e7cf5447313dc8550
Size

410KB
MD5

a43b91322c46a81a715262217fc7b848
SHA1

0bf2310b629c69bde49cd16ae01144faa277dd58
SHA256

0994e0972430f7cf02b66c290b6e62666c14da2ca9ad369e7cf5447313dc8550
SHA512

60ed9eb91ee42897322eedfc66b3c9266f5dcc6f66d4be36ce13437a1facabec923e51a4994d4334706c2a124c93739f3950561a872aa148228b3b25f17d341b
SSDEEP

6144:OJKjDQFSigDdVj4KRVhWWB0X/ww1H/9bTo6RGgBdezdwK8L7wHK3:OEnDdVjNVrBgH/STgBdWdhIwHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0994e0972430f7cf02b66c290b6e62666c14da2ca9ad369e7cf5447313dc8550

Files

0994e0972430f7cf02b66c290b6e62666c14da2ca9ad369e7cf5447313dc8550
.exe windows:5 windows x86 arch:x86

ad69f8f4b5008fa7408577b5f168b6e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitW
OpenFileMappingA
GetLargestConsoleWindowSize
GetConsoleAliasesLengthW
MapViewOfFile
GetNumaHighestNodeNumber
SetNamedPipeHandleState
ConnectNamedPipe
GetProcessTimes
SetProcessAffinityMask
GetQueuedCompletionStatus
CreateIoCompletionPort
HeapAlloc
SetConsoleWindowInfo
GetSystemPowerStatus
LocalAlloc
GetProcAddress
GetModuleHandleW
SetCalendarInfoW
SetThreadExecutionState
GetAtomNameW
SetConsoleScreenBufferSize
GetEnvironmentVariableW
BuildCommDCBAndTimeoutsA
IsBadReadPtr
CreateMailslotA
FindFirstVolumeMountPointW
SetFilePointer
WriteConsoleW
FindAtomW
_lopen
GetLastError
GetConsoleOutputCP
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
CreateFileW

user32

GetCursorInfo

advapi32

InitializeAcl
GetAclInformation
BackupEventLogA

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 195KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad69f8f4b5008fa7408577b5f168b6e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 92KB - Virtual size: 92KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 195KB - Virtual size: 248KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 92KB - Virtual size: 92KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 195KB - Virtual size: 248KB

.rsrc
Size: 100KB - Virtual size: 100KB