60f07af6be96f6438b919c79618973f56072378a20861477bb289d5c81c81ef9

Sharing

Copy URL Twitter E-mail

General

Target

60f07af6be96f6438b919c79618973f56072378a20861477bb289d5c81c81ef9
Size

455KB
MD5

407d079d85a78a8188f20d99189a19cc
SHA1

e44a5bf26ca84893d87e712dab90840a475e329a
SHA256

60f07af6be96f6438b919c79618973f56072378a20861477bb289d5c81c81ef9
SHA512

df1f2d6d51911eab8959266c2c4643b0e6fc0eafe50e7ab927f56c94c6661792a6e9ebc2ed93b45ff768f5a8cb650f5ea343de0b76b78e6ad4d54cfbe746e0b1
SSDEEP

768:7HCzIus49xwsbpLaccccccJwZLw9wGcccc+MXvquimrT3LUOCGaeo1iwghTgTlAl:7i5jVbpHcwghTgNnkh0O35tTRYy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f07af6be96f6438b919c79618973f56072378a20861477bb289d5c81c81ef9

Files

60f07af6be96f6438b919c79618973f56072378a20861477bb289d5c81c81ef9
.exe windows x64

08623753c3c8f530be13d939b5cfc3a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetShortPathNameA
GetModuleFileNameA
SizeofResource
HeapCreate
SetPriorityClass
GetCurrentProcess
WriteFile
SetThreadPriority
FindResourceA
GetEnvironmentVariableA
ResumeThread
lstrcatA
GetModuleHandleA
FreeResource
CopyFileA
CreateFileA
GetCurrentThread
LockResource
lstrcpyA
CloseHandle
LoadResource
HeapAlloc
CreateProcessA
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead

user32

EnumWindows

shell32

SHGetSpecialFolderPathA
ShellExecuteA

vcruntime140

memmove
__current_exception
__current_exception_context
memset
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_register_thread_local_exe_atexit_callback
terminate
_c_exit
_cexit
_seh_filter_exe
_exit
__p___argv
exit
__p___argc
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_crt_atexit
_set_app_type
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

_strrev

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsscanf
_set_fmode
__acrt_iob_func
__p__commode

api-ms-win-crt-filesystem-l1-1-0

_splitpath

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08623753c3c8f530be13d939b5cfc3a0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 600B

.rsrc Size: 439KB - Virtual size: 439KB

.reloc Size: 512B - Virtual size: 48B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 600B

.rsrc
Size: 439KB - Virtual size: 439KB

.reloc
Size: 512B - Virtual size: 48B