5914d5b6f36d66fb9fff80dd06d8af4df5dfa77e49f6e3bdf29b677f4d7d995a

Sharing

Copy URL

Twitter E-mail

General

Target

5914d5b6f36d66fb9fff80dd06d8af4df5dfa77e49f6e3bdf29b677f4d7d995a
Size

249KB
MD5

62b3a7698843ae77b0f60b34c8c0d9a0
SHA1

09dbe627b2be1eb4e0d61c2cac4b8d4480c1099b
SHA256

5914d5b6f36d66fb9fff80dd06d8af4df5dfa77e49f6e3bdf29b677f4d7d995a
SHA512

dad8902077b2a63f708a24f48dc3c35c0da0c45b80c705585bd9178eca8d745acbdc62f6e984d903795d0d6689038d9d29adcd736fad27395325f3b6843de885
SSDEEP

3072:x66FI4FhLuGdTDPr20yUI7j0S/D3UQfgDARz9Qg5xlS9H6p:x6qI47dNDCCI7QCjYDA7lEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5914d5b6f36d66fb9fff80dd06d8af4df5dfa77e49f6e3bdf29b677f4d7d995a

Files

5914d5b6f36d66fb9fff80dd06d8af4df5dfa77e49f6e3bdf29b677f4d7d995a
.exe windows:5 windows x86 arch:x86

ce4c7ed44a96045386f2afd2e6f500aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dadoyako69\kodit.pdb

Imports

kernel32

InterlockedIncrement
GetEnvironmentStringsW
WaitForSingleObject
SetEvent
GetSystemTimeAsFileTime
CancelDeviceWakeupRequest
GetCommandLineA
WriteFileGather
EnumResourceTypesA
SizeofResource
LeaveCriticalSection
GetFileAttributesW
WriteConsoleW
ReadFile
MapUserPhysicalPages
CreateActCtxA
GetProcAddress
VerLanguageNameA
RemoveDirectoryA
PrepareTape
GetProcessId
LocalAlloc
GlobalGetAtomNameW
WaitForMultipleObjects
GetModuleFileNameA
GetModuleHandleA
EndUpdateResourceA
LocalSize
FindFirstVolumeW
AddConsoleAliasA
LocalFree
FindNextVolumeA
lstrcpyW
GetLocaleInfoA
GetModuleFileNameW
HeapReAlloc
GetLastError
HeapAlloc
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetStdHandle
RtlUnwind
FlushFileBuffers
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
CreateFileA
CloseHandle

user32

GetCursorPos

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce4c7ed44a96045386f2afd2e6f500aa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 172KB - Virtual size: 172KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 7KB - Virtual size: 533KB

.rsrc Size: 55KB - Virtual size: 55KB

.text
Size: 172KB - Virtual size: 172KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 7KB - Virtual size: 533KB

.rsrc
Size: 55KB - Virtual size: 55KB