4eaedbcf172906a0479c5a5c79ba25ab5d874db37ce8441e85bd14502c223955

Sharing

Copy URL

Twitter E-mail

General

Target

4eaedbcf172906a0479c5a5c79ba25ab5d874db37ce8441e85bd14502c223955
Size

272KB
MD5

db35edf8d4310f37ef67ded609224c77
SHA1

c9958d9128a603602681b012474bada9265a0dd9
SHA256

4eaedbcf172906a0479c5a5c79ba25ab5d874db37ce8441e85bd14502c223955
SHA512

91ed64f75fb78e0996bb83c7a06a8996493bf0d1909b2b27b8fd4ebc0cd66a4c2384529cad0672d0966c28053932588108fc558ee8637425552441bb924d31b1
SSDEEP

6144:EqulKzGMz+9YfGcWSA6fQH0UkHhSfbr5W:E9KGMBfGcWSPFBH0fbrU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eaedbcf172906a0479c5a5c79ba25ab5d874db37ce8441e85bd14502c223955

Files

4eaedbcf172906a0479c5a5c79ba25ab5d874db37ce8441e85bd14502c223955
.exe windows:5 windows x86 arch:x86

7dafcd70a664a202d3adcbda7950e036

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\hukafiyozax-82\nug\gux\wapir\vezah\tacem\megucuhomer xi.pdb

Imports

kernel32

SetFirmwareEnvironmentVariableA
GetUserDefaultLCID
GetModuleHandleW
GetConsoleAliasesA
SetCommState
GetVolumePathNameW
GlobalAlloc
SetFileShortNameW
LoadLibraryW
LeaveCriticalSection
GetFileAttributesA
EnumSystemCodePagesA
GetNamedPipeInfo
GetFileAttributesW
WriteConsoleW
CreateJobObjectA
LCMapStringA
GetConsoleAliasesW
FillConsoleOutputCharacterW
GetLastError
WaitNamedPipeA
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
CreateNamedPipeA
CopyFileA
WriteConsoleA
CreateHardLinkW
GetNumberFormatW
SetProcessWorkingSetSize
OpenJobObjectW
FoldStringW
GetModuleHandleA
FindFirstChangeNotificationA
GetFileAttributesExW
GetCPInfoExA
GetVolumeNameForVolumeMountPointW
AddConsoleAliasA
GetComputerNameA
FillConsoleOutputCharacterA
SetLastError
GetFullPathNameW
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
DeleteCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapSize
RtlUnwind
SetHandleCount
GetFileType
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
CloseHandle
CreateFileA
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
SetEndOfFile
GetProcessHeap
ReadFile
GetConsoleOutputCP

gdi32

GetCharacterPlacementW

advapi32

CreateRestrictedToken

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dafcd70a664a202d3adcbda7950e036

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 77KB - Virtual size: 77KB

.data Size: 100KB - Virtual size: 113KB

.rsrc Size: 86KB - Virtual size: 86KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 77KB - Virtual size: 77KB

.data
Size: 100KB - Virtual size: 113KB

.rsrc
Size: 86KB - Virtual size: 86KB

.reloc
Size: 6KB - Virtual size: 6KB