e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6

Sharing

Copy URL

Twitter E-mail

General

Target

e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6
Size

312KB
MD5

03bd29ce9a726654cf9666e450f62e53
SHA1

e1b1dc40171f62a3fb4c54b332094cd4b4c25c38
SHA256

e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6
SHA512

3bb8ef186647749e588200d85aab5b4afa14703f50415a67ba0b453656e800be4c282b506a160f353c56459493d2700c19b5abb133336a229cab1e68d593c181
SSDEEP

6144:rOCN2BhWjd0/8Z9sn3yp2aZqSOOGVB46qSAhil+:rPPj1ZKaq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6

Files

e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6
.exe windows:6 windows x64 arch:x64

8d268fdcc08a0ad0bb783b5fdfe86f42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

nEzQJGWA.pdb

Imports

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
CreateFileMappingW
MapViewOfFile
CreateThread
GetThreadContext
SetThreadContext
ResumeThread
WaitForSingleObject
CloseHandle
GetLastError
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
SetFileInformationByHandle
GetCurrentProcess
GetStdHandle
GetCurrentProcessId
QueryPerformanceFrequency
GetProcessHeap
HeapFree
HeapReAlloc
lstrlenW
ReleaseMutex
FindNextFileW
FindClose
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
FindFirstFileExW
GetConsoleMode
GetModuleHandleW
FormatMessageW
ExitProcess
GetFullPathNameW
GetConsoleOutputCP
MultiByteToWideChar
WriteConsoleW
WideCharToMultiByte
IsProcessorFeaturePresent
GetModuleHandleA
GetProcAddress
HeapAlloc
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetSystemTimeAsFileTime
GetCurrentThreadId

ntdll

NtWriteFile
RtlNtStatusToDosError

vcruntime140

__C_specific_handler
memmove
__CxxFrameHandler3
memset
memcpy
memcmp
_CxxThrowException

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-runtime-l1-1-0

_initterm_e
exit
_exit
_seh_filter_exe
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_initialize_narrow_environment
_set_app_type
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_configure_narrow_argv
_initterm

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d268fdcc08a0ad0bb783b5fdfe86f42

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 122KB - Virtual size: 121KB

.rdata Size: 115KB - Virtual size: 115KB

.data Size: 512B - Virtual size: 712B

.pdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 66KB - Virtual size: 66KB

.reloc Size: 1024B - Virtual size: 1012B

.text
Size: 122KB - Virtual size: 121KB

.rdata
Size: 115KB - Virtual size: 115KB

.data
Size: 512B - Virtual size: 712B

.pdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 66KB - Virtual size: 66KB

.reloc
Size: 1024B - Virtual size: 1012B