19c952a1804767ad97270f59d3a160618ff10efd332a8efd3735cc9770082501

Sharing

Copy URL

Twitter E-mail

General

Target

19c952a1804767ad97270f59d3a160618ff10efd332a8efd3735cc9770082501
Size

237KB
MD5

209cf243273e1c853d872190dfd6a8a0
SHA1

8b78bea1f98f95afe843ad627ab76e5bb1efba48
SHA256

19c952a1804767ad97270f59d3a160618ff10efd332a8efd3735cc9770082501
SHA512

65a5e1f18d431a7858f167dc07a3faf7af47ca8817771b5be96feb43c72491e3442fe7bb76c3bebaf6b08971fd68c678ff1e4856cfb5f0962e16fd6de165fe6e
SSDEEP

6144:dEUWWTFkSlqyCT0iPdsZfZh9M4CkxW0g8WQElntMM:vFTeSlqyCTHa/h9BFxWhnDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c952a1804767ad97270f59d3a160618ff10efd332a8efd3735cc9770082501

Files

19c952a1804767ad97270f59d3a160618ff10efd332a8efd3735cc9770082501
.exe windows:5 windows x86 arch:x86

63fc28335e602552107036f2ceb974a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\rolid\fomuwohib_nuwuga\feci\julosumov.pdb

Imports

kernel32

GetCommandLineW
GetNativeSystemInfo
lstrlenA
TlsGetValue
GetStringTypeA
InterlockedIncrement
GetQueuedCompletionStatus
ReadConsoleA
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GetPrivateProfileStringW
WriteFile
SetCommState
GlobalAlloc
LoadLibraryW
GetSystemWindowsDirectoryA
GetConsoleAliasExesLengthW
GlobalFlags
GetExitCodeProcess
IsDBCSLeadByte
ReadFile
GetStartupInfoW
GlobalUnlock
GetNamedPipeHandleStateW
LCMapStringA
GetPrivateProfileIntW
InterlockedExchange
GetStartupInfoA
GetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
CopyFileA
LoadLibraryA
CreateSemaphoreW
GetFileType
SetCurrentDirectoryW
HeapWalk
FindAtomA
Process32NextW
FreeEnvironmentStringsW
EnumResourceNamesA
GetCurrentThreadId
GetCPInfoExA
SetThreadAffinityMask
FindAtomW
DeleteFileW
GetSystemTime
CopyFileExA
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
SetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
HeapAlloc
HeapSize
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LCMapStringW
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 39.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63fc28335e602552107036f2ceb974a9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 67KB - Virtual size: 39.1MB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 67KB - Virtual size: 39.1MB

.rsrc
Size: 15KB - Virtual size: 15KB