9a262eeab26fb18cd6244c63b3f4bab77b8178f33b70c12cc015db032cfa1015

Sharing

Copy URL

Twitter E-mail

General

Target

9a262eeab26fb18cd6244c63b3f4bab77b8178f33b70c12cc015db032cfa1015
Size

75KB
MD5

686b64b6f27a0205cfcdf3ad783a9070
SHA1

9fcb0989263284d014722f2dce2afc54fd01dfa3
SHA256

9a262eeab26fb18cd6244c63b3f4bab77b8178f33b70c12cc015db032cfa1015
SHA512

1f64e6388ecf99ea3d6bb6e6ed942078ec583bed79fd0f4eb04aa34b6e38711b96f35f12e6f10d193c7a8e19b50a104944ce2dcc4bd09847f4b1a5bf9810ee44
SSDEEP

768:I0suWW7dmW5Qk45r58sTdS1nDbUcMjcZYIMExnJywUcy2ciyBUsVtcDvvVcffZmO:LtsWhcr580dYa60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a262eeab26fb18cd6244c63b3f4bab77b8178f33b70c12cc015db032cfa1015

Files

9a262eeab26fb18cd6244c63b3f4bab77b8178f33b70c12cc015db032cfa1015
.exe windows:4 windows x64 arch:x64

6b241b52c277208790d160d7d19d366b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetTokenInformation
OpenProcessToken

kernel32

FileTimeToSystemTime
GetDateFormatEx
GetModuleHandleW
GetProcAddress
GetTickCount
GetTimeFormatEx
HeapAlloc
HeapReAlloc
QueryPerformanceCounter
QueryPerformanceFrequency
SystemTimeToTzSpecificLocalTime

ntdll

_vsnprintf

secur32

LsaCallAuthenticationPackage
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaFreeReturnBuffer
LsaLookupAuthenticationPackage

ucrtbase

__acrt_iob_func
__p___argc
__p___wargv
__stdio_common_vfwprintf
__stdio_common_vsprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
_strdup
exit
free
fwrite
getenv
malloc
memcmp
memmove
strchr
strcmp
strcspn
strlen
wcscat
wcscmp
wcslen

user32

LoadStringW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b241b52c277208790d160d7d19d366b

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ntdll

secur32

ucrtbase

user32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 2KB

.pdata Size: 4KB - Virtual size: 204B

.xdata Size: 4KB - Virtual size: 284B

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 16B

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 2KB

.pdata
Size: 4KB - Virtual size: 204B

.xdata
Size: 4KB - Virtual size: 284B

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 16B