091b86e607af977cc6b48a58507d32a7ad245af1f2cda4980c0dd1b4d08507bf

Sharing

Copy URL

Twitter E-mail

General

Target

091b86e607af977cc6b48a58507d32a7ad245af1f2cda4980c0dd1b4d08507bf
Size

302KB
MD5

96158e6f15bd9951b13edc5d6e40f357
SHA1

8199834e072258103720ccf33d10fa78c45df776
SHA256

091b86e607af977cc6b48a58507d32a7ad245af1f2cda4980c0dd1b4d08507bf
SHA512

e88cc1bb07097eb7bd7485353b31edda0f4aa35109615519e88bbdbc80585811c660970732999e07eb94c074451682675fcea6e79c24ee63df7f99bf6986ad6c
SSDEEP

6144:+r7beYd6upMOOsrLJffxOD3pZSVrdoTeJsVkbE9ucqe7fWJGflTvuLE:+r7yFf0LJffxOD5ZSRdoTeq59ufe7fWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
091b86e607af977cc6b48a58507d32a7ad245af1f2cda4980c0dd1b4d08507bf

Files

091b86e607af977cc6b48a58507d32a7ad245af1f2cda4980c0dd1b4d08507bf
.exe windows:5 windows x86 arch:x86

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
ReadFile
VirtualFree
QueryDosDeviceA
GetFileSize
DeviceIoControl
FindNextFileA
VirtualAlloc
GetFullPathNameA
WriteFile
CloseHandle
RtlUnwind
CreateEventA
GetTimeZoneInformation
FreeLibrary
DuplicateHandle
GetLogicalDrives
ResetEvent
GetCurrentThreadId
OutputDebugStringA
DeleteFileA
FlushFileBuffers
WideCharToMultiByte
CreateFileA
CreateThread
IsBadCodePtr
GetSystemTime
WaitForSingleObject
SystemTimeToFileTime
EnterCriticalSection
FindClose
SetFilePointer
GetFileTime
DeleteCriticalSection
LeaveCriticalSection
FindFirstFileA
GetSystemTimeAsFileTime
GetModuleHandleA
UnhandledExceptionFilter
FileTimeToSystemTime
CreateMutexA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize

user32

GetUserObjectInformationA
MessageBoxA
GetProcessWindowStation

msvcrt

_XcptFilter
malloc
fopen
_snprintf
swprintf
fflush
wcsncpy
_purecall
__CxxFrameHandler
printf
localtime
rand
strncmp
_errno
ctime
fseek
toupper
wcsstr
memmove
free
strncpy
strstr
time
fprintf
_CxxThrowException
_splitpath
memcpy
vsprintf
_initterm
ftell
fread
_wcsicmp
fclose
_strupr
_stricmp
srand
_amsg_exit
calloc
sprintf
memset

esent

JetCreateIndex
JetDelete
JetOpenFileSectionInstance
JetOpenTempTable
JetCreateIndex2
JetAddColumn
JetOSSnapshotFreeze
JetEnableMultiInstance
JetOpenFile
JetDeleteColumn2
JetDBUtilities
JetBeginTransaction
JetGetSecondaryIndexBookmark
JetOpenTempTable3
JetRestore
JetRestoreInstance
JetExternalRestore2
JetSetCurrentIndex
JetGetTableIndexInfo
JetMakeKey
JetDetachDatabase
JetStopServiceInstance

iprtprio

GetPriorityInfo
SetPriorityInfo

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

user32

msvcrt

esent

iprtprio

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 275KB - Virtual size: 461KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 275KB - Virtual size: 461KB

.rsrc
Size: 3KB - Virtual size: 2KB