f79bfed1e3eae67b8592545fb460c4ddfdd7665f43ba341701f1d26f8f869869

Sharing

Copy URL

Twitter E-mail

General

Target

f79bfed1e3eae67b8592545fb460c4ddfdd7665f43ba341701f1d26f8f869869
Size

230KB
MD5

b46d86589be0862a67bff722019c8a2e
SHA1

870256ce6fd74b6c6d4ac99bee6f69830b972291
SHA256

f79bfed1e3eae67b8592545fb460c4ddfdd7665f43ba341701f1d26f8f869869
SHA512

f3e40e2be05457aca7c4b4f5b4e832c3cebf79d0f1a4c45a592fcaf510204c1c4a47c3366f0e091033097313e8a20bc6cbcc07481c27b354b7cad9b255a3377d
SSDEEP

3072:Ze+AaqEL7QUs2OLwX6dGN8X+9x6tOLzNEHRxnFFSf9M/h3qpZa9uD6VdyhkEzRv4:xAaJ8zdEP9Tz2HF81rwVfEz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f79bfed1e3eae67b8592545fb460c4ddfdd7665f43ba341701f1d26f8f869869

Files

f79bfed1e3eae67b8592545fb460c4ddfdd7665f43ba341701f1d26f8f869869
.exe windows:5 windows x86 arch:x86

d816a5d30b228eed814e6bfe59f79aa7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\tixit58_mupirevajegiyu\linanuteyacoru84\rucahigoto\mabac.pdb

Imports

kernel32

GetModuleFileNameA
FoldStringA
InterlockedIncrement
_hread
CancelWaitableTimer
WaitNamedPipeA
BuildCommDCBA
GetConsoleAliasExesLengthW
PeekConsoleInputA
CreateFileA
RegisterWaitForSingleObject
LoadLibraryA
EnumResourceTypesA
TransmitCommChar
GetFirmwareEnvironmentVariableA
GetModuleFileNameW
BeginUpdateResourceA
GetConsoleAliasExesLengthA
WriteConsoleA
LoadLibraryW
WriteConsoleW
DeleteFileW
FillConsoleOutputCharacterW
GetProcAddress
GetSystemDefaultLCID
GetConsoleAliasW
FindFirstChangeNotificationA
LocalReAlloc
RemoveDirectoryW
lstrcpynW
FindFirstFileExA
AreFileApisANSI
GetCurrentDirectoryW
GetConsoleAliasesLengthW
SetConsoleTitleA
GetBinaryTypeA
GlobalAlloc
FindNextFileA
OpenJobObjectW
HeapFree
_lopen
GetComputerNameW
SetThreadLocale
GetSystemDefaultLangID
GetCurrentProcess
TlsGetValue
SetCalendarInfoW
SetComputerNameA
FoldStringW
GetDiskFreeSpaceW
RtlUnwind
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
GetLastError
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
HeapAlloc
TlsAlloc
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
LCMapStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
CreateFileW

user32

ScreenToClient

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d816a5d30b228eed814e6bfe59f79aa7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 62KB - Virtual size: 61KB

.data Size: 73KB - Virtual size: 450KB

.rsrc Size: 94KB - Virtual size: 94KB

.text
Size: 62KB - Virtual size: 61KB

.data
Size: 73KB - Virtual size: 450KB

.rsrc
Size: 94KB - Virtual size: 94KB