4a32b95f5d2b586bb6b619d8c84a881fe239f199b7decb0a642eea30e3f38303

Sharing

Copy URL

Twitter E-mail

General

Target

4a32b95f5d2b586bb6b619d8c84a881fe239f199b7decb0a642eea30e3f38303
Size

330KB
MD5

3217e1a8377eb0c1b0a9fbe3204ac5fe
SHA1

13e4aa49960e490ff6963a70a3147fa07af926c9
SHA256

4a32b95f5d2b586bb6b619d8c84a881fe239f199b7decb0a642eea30e3f38303
SHA512

8af80137d7855d92bee752c0e64f1a998dcf4e4669c719e4a6c96371469b9ac9374b6e0c5d2e91e152ad0d6047eeb2050c3da7f90ea4afa118b81e758b05a1fb
SSDEEP

6144:6zxy/CluUz7aC67nh3jhVVPE+O1voXc4:Cs/27a93tDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a32b95f5d2b586bb6b619d8c84a881fe239f199b7decb0a642eea30e3f38303

Files

4a32b95f5d2b586bb6b619d8c84a881fe239f199b7decb0a642eea30e3f38303
.exe windows:5 windows x86 arch:x86

35f46893ae897497be39cea0547d1715

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\xisayasu\yidibo lut\mazepat\f.pdb

Imports

kernel32

GetComputerNameA
SetProcessAffinityMask
WriteConsoleOutputCharacterA
OpenJobObjectA
GetCommState
AddConsoleAliasW
CreateHardLinkA
GetSystemDefaultLCID
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
WaitNamedPipeW
LoadLibraryW
CopyFileW
GetFileAttributesA
EnumSystemCodePagesA
GetFileAttributesW
WriteConsoleW
GetVolumePathNameA
FillConsoleOutputCharacterW
GetLastError
GetProcAddress
VirtualAlloc
RemoveDirectoryA
LoadLibraryA
WriteConsoleA
GetProcessWorkingSetSize
LocalAlloc
GetModuleHandleA
CreateMutexA
FindNextFileW
GetStringTypeW
GetFileAttributesExW
SetFileShortNameA
GetVolumeNameForVolumeMountPointW
LCMapStringW
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
HeapReAlloc
SetStdHandle
LCMapStringA
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
FlushFileBuffers
GetConsoleOutputCP
CloseHandle
CreateFileA

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35f46893ae897497be39cea0547d1715

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 100KB - Virtual size: 4.1MB

.rsrc Size: 145KB - Virtual size: 145KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 100KB - Virtual size: 4.1MB

.rsrc
Size: 145KB - Virtual size: 145KB

.reloc
Size: 16KB - Virtual size: 16KB