f99f2398692ceea5c6dc7193c5f8b4646d8379dd0eaf810ebc96b9f95e4927b3[.]exe

General

Target

f99f2398692ceea5c6dc7193c5f8b4646d8379dd0eaf810ebc96b9f95e4927b3.exe
Size

314KB
MD5

e9133123938cc55db1abb94d4249485e
SHA1

a46a5985fc552964571801a98f9a2aa7d8a85e72
SHA256

f99f2398692ceea5c6dc7193c5f8b4646d8379dd0eaf810ebc96b9f95e4927b3
SHA512

c325d0d939aa23795e82791062a6bfd7005b7e17866aae2e479203988f79b5a2fcd65913f6322768c7421abb4b08eee561fcdaf3b39403370c7362388c491b37
SSDEEP

6144:dC+crrLdBTznjrbFloOHKBNpfYeFY2DqnsvQWKz:dC+cPxBTjXbFPHKBNpfYeF5msI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f99f2398692ceea5c6dc7193c5f8b4646d8379dd0eaf810ebc96b9f95e4927b3.exe

Files

f99f2398692ceea5c6dc7193c5f8b4646d8379dd0eaf810ebc96b9f95e4927b3.exe
.exe windows:5 windows x86 arch:x86

e2e32a677b472e0740e73064517d913d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
EnumCalendarInfoW
GetCurrentProcess
InterlockedCompareExchange
WriteConsoleInputA
EnumCalendarInfoExW
GetWindowsDirectoryA
EnumTimeFormatsW
LoadLibraryW
SetCommConfig
SwitchToFiber
GetConsoleAliasExesLengthW
GetVersionExW
GetAtomNameW
GetModuleFileNameW
GetEnvironmentVariableA
FindNextVolumeMountPointW
GetShortPathNameA
InterlockedExchange
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
CreateJobSet
LoadLibraryA
InterlockedExchangeAdd
FoldStringA
EnumDateFormatsA
SetLocaleInfoW
FindNextFileW
OpenEventW
ReadConsoleInputW
GetCurrentProcessId
FindNextVolumeA
EnumSystemLocalesW
GetModuleHandleW
Sleep
ExitProcess
GetStartupInfoW
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
CloseHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RaiseException
SetStdHandle
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

Sections

.text
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2e32a677b472e0740e73064517d913d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 254KB - Virtual size: 253KB

.data Size: 24KB - Virtual size: 33KB

.rsrc Size: 35KB - Virtual size: 34KB

.text
Size: 254KB - Virtual size: 253KB

.data
Size: 24KB - Virtual size: 33KB

.rsrc
Size: 35KB - Virtual size: 34KB