03e4f0f2ae66bdb9181166afd2b4eda11fbff69a3f9d3bad6f4b6f26fbe6dc23

Sharing

Copy URL

Twitter E-mail

General

Target

03e4f0f2ae66bdb9181166afd2b4eda11fbff69a3f9d3bad6f4b6f26fbe6dc23
Size

408KB
MD5

39f00eb8cef64c912ae776e06c0575b4
SHA1

06510ccc67359cab7d1bffa2369f89c3a4d2e3d7
SHA256

03e4f0f2ae66bdb9181166afd2b4eda11fbff69a3f9d3bad6f4b6f26fbe6dc23
SHA512

895e0eba18e05f9cca9c93305197a25019faa6b65c474ab7c0d21df18b47e717e3062349ae978c269bad433732af533d5a0655315f79e198f2d88750d292853f
SSDEEP

6144:MFV17WRInnAN3ue+uvNmebxYJ9F21e5csnSEnDHTSUTAAOxYLCe2b:MP7WRInNuvFbWJ9FrqsSq2UTABqX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e4f0f2ae66bdb9181166afd2b4eda11fbff69a3f9d3bad6f4b6f26fbe6dc23

Files

03e4f0f2ae66bdb9181166afd2b4eda11fbff69a3f9d3bad6f4b6f26fbe6dc23
.exe windows:5 windows x86 arch:x86

5988c04aacb16c2458ab72bf30906097

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\riva1\jef47\lugosa98-hiligesejeyer-mun\hix\bik\lo.pdb

Imports

kernel32

FindResourceExW
ReadConsoleA
GetConsoleAliasA
InterlockedDecrement
SetMailslotInfo
GetComputerNameW
SetEvent
SleepEx
GetModuleHandleW
GetConsoleAliasesLengthA
GlobalAlloc
ReadConsoleInputA
GetVersionExW
GetFileAttributesA
GetTimeFormatW
GetOverlappedResult
SetConsoleTitleA
SetLocaleInfoA
GetConsoleAliasesW
GetStdHandle
GetLongPathNameW
GetProcAddress
VirtualAlloc
FindClose
GetAtomNameA
UnhandledExceptionFilter
DnsHostnameToComputerNameA
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
GetStringTypeW
GetConsoleTitleW
WriteProfileStringW
GetFileTime
CreateThread
EnumSystemLocalesA
MultiByteToWideChar
GetLastError
HeapReAlloc
HeapAlloc
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
DeleteCriticalSection
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetFilePointer
HeapCreate
VirtualFree
CloseHandle
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetLocaleInfoA
CreateFileA
ReadFile
SetStdHandle
FlushFileBuffers
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap

advapi32

ReportEventA

winhttp

WinHttpCloseHandle

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5988c04aacb16c2458ab72bf30906097

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

winhttp

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 243KB - Virtual size: 242KB

.data Size: 34KB - Virtual size: 52KB

.rsrc Size: 58KB - Virtual size: 57KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 243KB - Virtual size: 242KB

.data
Size: 34KB - Virtual size: 52KB

.rsrc
Size: 58KB - Virtual size: 57KB