b691f02da8078745eea923ea305bcddc377c50d214cb531284e86b4d5c1025b0

Sharing

Copy URL

Twitter E-mail

General

Target

b691f02da8078745eea923ea305bcddc377c50d214cb531284e86b4d5c1025b0
Size

214KB
MD5

5e8b41e37d55fbb987d824e3010caafe
SHA1

450562fc2cb9a92ca70573bad727e32ed5d171dd
SHA256

b691f02da8078745eea923ea305bcddc377c50d214cb531284e86b4d5c1025b0
SHA512

dda04b520cd990030626f498480ba835803d07779cd2fc3571e0ee864b2c3b67205f2afcad8eea87435e4c33be43a42e7c616a1939818ee2adb487af4b9495ff
SSDEEP

3072:mjadwICnX+t1Kz3j9OFjQ//4Y//NKBHw84k0tyiIA+85i1IlkRU6KGCiFpyOKSUk:mOdwIUTjdcHw9CNU6KGNBKGMffhCuC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/8767b153be8b11a467e1906ae2c1e14d916e79bc6cc81e9545d93e863d66f021

Files

b691f02da8078745eea923ea305bcddc377c50d214cb531284e86b4d5c1025b0
.zip
8767b153be8b11a467e1906ae2c1e14d916e79bc6cc81e9545d93e863d66f021
.exe windows:5 windows x86 arch:x86

5296ceb46a7d59bca610f49e86d17520

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\huyipazeha3_caw28\rel22_kitorital_fuguharan\22\nafati.pdb

Imports

kernel32

GetProfileIntW
CreateJobObjectW
GetUserDefaultLCID
GetComputerNameW
GetModuleHandleW
GetConsoleAliasesA
WaitNamedPipeW
GetVolumePathNameW
GetVolumeInformationA
LoadLibraryW
IsProcessInJob
AssignProcessToJobObject
GetCalendarInfoW
EnumSystemCodePagesA
GetFileAttributesW
WriteConsoleW
TlsGetValue
LCMapStringA
GetLastError
GetProcAddress
VirtualAlloc
SetFileAttributesA
LoadLibraryA
LocalAlloc
SetProcessWorkingSetSize
OpenJobObjectW
FoldStringW
FindFirstChangeNotificationA
GetVolumeNameForVolumeMountPointW
GetFileInformationByHandle
AddConsoleAliasA
FillConsoleOutputCharacterA
SetThreadPriority
GetFullPathNameA
HeapAlloc
GetStartupInfoW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
RaiseException
GetModuleHandleA
GetLocaleInfoA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile

advapi32

BackupEventLogA
ReportEventW

winhttp

WinHttpCloseHandle

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jux
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lixawo
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5296ceb46a7d59bca610f49e86d17520

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

winhttp

Sections

.text Size: 90KB - Virtual size: 89KB

.data Size: 109KB - Virtual size: 121KB

.jux Size: 3KB - Virtual size: 2KB

.lixawo Size: 1024B - Virtual size: 624B

.rsrc Size: 117KB - Virtual size: 116KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 90KB - Virtual size: 89KB

.data
Size: 109KB - Virtual size: 121KB

.jux
Size: 3KB - Virtual size: 2KB

.lixawo
Size: 1024B - Virtual size: 624B

.rsrc
Size: 117KB - Virtual size: 116KB

.reloc
Size: 7KB - Virtual size: 6KB