fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3.exe
Size

238KB
MD5

af3e65a6dd8cdff082755c73155fb182
SHA1

77fb08db1b810c5fcb21bdee3e752ad5115b9449
SHA256

fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3
SHA512

ad2a157decdde4f3dc1661b8387ac93dbc845b8692184d1b788abceef2e81d8ff2a6b0279cf31c821a72516e91451d6606f2987954ebb7a2af24659d9d1abe9a
SSDEEP

3072:p0ef7i9FajzFgptNwf+jbjQE7f1tI/wTl53cMwd9ZGSwFl:iefrjMtmW/ES8wTTwdPGSwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3.exe

Files

fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3.exe
.exe windows:5 windows x86 arch:x86

17fedc67c91a23016ced8a879a1b9a8c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultCommConfigA
SearchPathW
SetLocaleInfoA
SetErrorMode
InterlockedIncrement
InterlockedDecrement
ReadConsoleOutputAttribute
GetEnvironmentStringsW
GetTimeFormatA
SetEvent
GetModuleHandleW
GetDateFormatA
GetCommandLineA
SetProcessPriorityBoost
LoadLibraryW
DeleteVolumeMountPointW
GetConsoleAliasW
GetStartupInfoA
SetLastError
GetProcAddress
SetFileAttributesA
BuildCommDCBW
GetNumaHighestNodeNumber
GetAtomNameA
LoadLibraryA
Process32Next
LocalAlloc
GetFileType
AddAtomW
AddAtomA
FoldStringA
CreatePipe
GetModuleHandleA
OpenFileMappingW
GetShortPathNameW
EndUpdateResourceA
GetVersionExA
FindFirstVolumeW
UnregisterWaitEx
HeapAlloc
MultiByteToWideChar
GetLastError
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
ReadFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

user32

GetProcessDefaultLayout

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17fedc67c91a23016ced8a879a1b9a8c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 28KB - Virtual size: 3.9MB

.rsrc Size: 69KB - Virtual size: 68KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 28KB - Virtual size: 3.9MB

.rsrc
Size: 69KB - Virtual size: 68KB