45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678

Sharing

Copy URL

Twitter E-mail

General

Target

45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678
Size

315KB
MD5

4c79bd9380c0919ea5cefd071440237f
SHA1

79edb2ab12d2615fd22dfb7b2a75b23aa4b7b18f
SHA256

45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678
SHA512

f68af523aab517794b16d367f4ee746b056c1c7a5ccf7f66b9770f74f7b3adb9b3f90ffb9e1190092e4700f5cb85b6613a4482dd30ba899f1d2eb83c630097c6
SSDEEP

6144:JxF4f/nJWHDSdh2WNTWSgZdf/e1zB3BYhrFLqZjG05pl:JxF4f/MDSdh3NTWSgZdfCBRYhrFLyyMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678

Files

45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678
.exe windows:5 windows x86 arch:x86

a9e1103bbc08b87eea5d7311fb0b7c3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\bexudanugitosa\huriluma\tecibiwemupap\xosefefavutiba\7.pdb

Imports

kernel32

FreeLibrary
InterlockedIncrement
GetCommState
GetProfileStringW
CallNamedPipeW
GetNumberFormatA
GetCommandLineA
FindResourceExA
GlobalAlloc
GetPrivateProfileIntA
GetVolumeInformationA
GetSystemWow64DirectoryW
GetSystemWindowsDirectoryA
HeapDestroy
GetCompressedFileSizeA
GetSystemDirectoryA
CreateActCtxA
GetBinaryTypeW
WritePrivateProfileStringW
LCMapStringA
GetStartupInfoA
SetThreadLocale
GetStdHandle
CopyFileExW
GetLastError
SetLastError
GetProcAddress
CreateNamedPipeA
SearchPathA
LoadLibraryA
OpenMutexA
CreateSemaphoreW
FindAtomA
SetSystemTime
GetModuleFileNameA
CreateIoCompletionPort
FindFirstChangeNotificationA
HeapSetInformation
FreeEnvironmentStringsW
FindNextFileW
GetCurrentDirectoryA
SetFileShortNameA
TerminateJobObject
FindAtomW
UnregisterWaitEx
DeleteFileA
lstrlenA
GetCPInfoExW
GetThreadContext
CloseHandle
CreateFileW
WideCharToMultiByte
EncodePointer
DecodePointer
GetCommandLineW
GetStartupInfoW
InterlockedDecrement
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
WriteFile
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
IsProcessorFeaturePresent
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
SetStdHandle
FlushFileBuffers

advapi32

InitiateSystemShutdownA
AbortSystemShutdownA

winhttp

WinHttpOpen

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9e1103bbc08b87eea5d7311fb0b7c3e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

winhttp

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 141KB - Virtual size: 4.3MB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 141KB - Virtual size: 4.3MB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 22KB - Virtual size: 22KB