05c149cd067fcea874100bc4ee64df7880e72bc211fa42f1325d4ffb9281d0a9[.]exe

General

Target

05c149cd067fcea874100bc4ee64df7880e72bc211fa42f1325d4ffb9281d0a9.exe
Size

4.6MB
MD5

d86d75d5a8dea759decaff645a7df955
SHA1

fdc9c359f4234bfee14f1a8313af737232a4297d
SHA256

05c149cd067fcea874100bc4ee64df7880e72bc211fa42f1325d4ffb9281d0a9
SHA512

deb0164d9c060b35676bc43c57df027415f26c1256cdb6fa09ce6f21d24e21e597f190141a549ba5d252e4fca894a618ab71a41a4af357868dc5af093c43beb7
SSDEEP

98304:3Lmwt3iDDTsfBbMNYn1Ody2FSgW9Yh1qiVhfLx/AcVC+OPbjp1tOYk8Bm2GRdZr5:oTKBMNOOclYhYib7VC+gb5k8Bf815

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
05c149cd067fcea874100bc4ee64df7880e72bc211fa42f1325d4ffb9281d0a9.exe

Files

05c149cd067fcea874100bc4ee64df7880e72bc211fa42f1325d4ffb9281d0a9.exe
.exe windows:6 windows x86 arch:x86

908bea7ee71339f1c35ba419da3ba679

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

wtsapi32

WTSSendMessageW

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JqjbwEJ
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bqb2b41
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bqb2b41
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

908bea7ee71339f1c35ba419da3ba679

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

wtsapi32

Sections

.text Size: 136KB - Virtual size: 135KB

.JqjbwEJ Size: 3KB - Virtual size: 3KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 4KB - Virtual size: 7KB

.bqb2b41 Size: 2.5MB - Virtual size: 2.5MB

.bqb2b41 Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 16KB - Virtual size: 15KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 136KB - Virtual size: 135KB

.JqjbwEJ
Size: 3KB - Virtual size: 3KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 4KB - Virtual size: 7KB

.bqb2b41
Size: 2.5MB - Virtual size: 2.5MB

.bqb2b41
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB