1971f8e513ac05efce84575b72c042677a735f6698d927f0973c50471515abe3

Sharing

Copy URL

Twitter E-mail

General

Target

1971f8e513ac05efce84575b72c042677a735f6698d927f0973c50471515abe3
Size

207KB
MD5

32733df1e743d6b4eb208bd1e27b7e43
SHA1

13bacf84ecfa60f3866d157ed8458f2bbe6df81c
SHA256

1971f8e513ac05efce84575b72c042677a735f6698d927f0973c50471515abe3
SHA512

6f86d380f8715ebc82c07d8de8f88b574160928c379968f5bc44dfb932be5007bf9b189b437678d2dba09770b39ef760260c90776d47fb5a8f6c605fdb98320d
SSDEEP

6144:XycpF2g9yYyQypsNZ9XzBXBp80zBr991rO:Xyk19dhfXzBX9zBztO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/29f391a2943fe0a0c48438f4c913fd561e6f6b1d8938b87032851f92de12b7c6

Files

1971f8e513ac05efce84575b72c042677a735f6698d927f0973c50471515abe3
.zip
29f391a2943fe0a0c48438f4c913fd561e6f6b1d8938b87032851f92de12b7c6
.exe windows:5 windows x86 arch:x86

a2621436f4406f4307af4f1128888722

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\hupisusaduhi 56\zuvajazi\44\komup\gilo\zosodanicuhu-sib.pdb

Imports

kernel32

FillConsoleOutputCharacterA
OpenJobObjectA
GetCommState
GetUserDefaultLCID
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
WaitNamedPipeW
GetVolumePathNameW
GlobalAlloc
LoadLibraryW
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
WriteConsoleW
CreateJobObjectA
LCMapStringA
GetConsoleAliasesW
FillConsoleOutputCharacterW
GetLastError
GetFullPathNameA
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
CopyFileA
EnumSystemCodePagesW
GetProcessWorkingSetSize
CreateHardLinkW
OpenJobObjectW
FoldStringA
GetModuleHandleA
FindFirstChangeNotificationA
FindNextFileW
GetFileAttributesExW
SetFileShortNameA
GetVolumeNameForVolumeMountPointW
AddConsoleAliasA
SetLastError
GetComputerNameA
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapSize
EnterCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
CloseHandle
CreateFileA
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleA
GetConsoleOutputCP

gdi32

GetCharacterPlacementA

ole32

CoRevokeMallocSpy

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2621436f4406f4307af4f1128888722

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

ole32

Sections

.text Size: 78KB - Virtual size: 78KB

.data Size: 100KB - Virtual size: 113KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 78KB - Virtual size: 78KB

.data
Size: 100KB - Virtual size: 113KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 7KB - Virtual size: 6KB