6fbdb80de5acd8f1833edf9ec7d12010bcde6e25a8483923710d4165552f46db

Sharing

Copy URL Twitter E-mail

General

Target

6fbdb80de5acd8f1833edf9ec7d12010bcde6e25a8483923710d4165552f46db
Size

5.8MB
MD5

71181be80f14d7544d0633a17d162e0e
SHA1

429ccb592ff64966dc90ab0a91d9afe551af364f
SHA256

6fbdb80de5acd8f1833edf9ec7d12010bcde6e25a8483923710d4165552f46db
SHA512

347334c0a24fb30cfea6feacd91f7cad8c444d00416cd77f2cf9c9e423fd8cf44e6c09fbf293fc9b867a2156c2822d932e05abcb8ea820cf3bd1c81433934748
SSDEEP

12288:xSQkNsayCBVsN9bgD3wGkROClnMF01FezEOvV3iNgaKiMvDlOCF/3vi499HW76:xSQk2ZCow90YvVogBh3d27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fbdb80de5acd8f1833edf9ec7d12010bcde6e25a8483923710d4165552f46db

Files

6fbdb80de5acd8f1833edf9ec7d12010bcde6e25a8483923710d4165552f46db
.exe windows x86

8af1322ce860d4f7039f4411b6f9717c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

comctl32

CreateToolbarEx
ord17
ord6
ord2

winmm

waveOutGetNumDevs
PlaySoundA

kernel32

LoadLibraryExA
GetVersionExA
WinExec
CloseHandle
GlobalReAlloc
lstrcpyA
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
InterlockedExchange
EnterCriticalSection
GetModuleHandleA
DeleteCriticalSection
ResumeThread
GetFileSize
GetTimeFormatA
GetDateFormatA
Beep
ReadFile
SetCurrentDirectoryA
lstrcmpiA
GetTickCount
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
TlsAlloc
GetModuleFileNameA
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
InterlockedDecrement
ExitProcess
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LoadLibraryW
RtlUnwind
HeapAlloc
HeapReAlloc
GetStringTypeW
SetStdHandle
WriteConsoleW
IsProcessorFeaturePresent
HeapSize
CreateFileW
LockResource
GetLocalTime
GetPrivateProfileStringA
GlobalFree
GetProcAddress
CreateDirectoryA
FlushFileBuffers
GlobalUnlock
lstrcatA
SizeofResource
GlobalAlloc
WriteFile
GlobalLock
LoadResource
FreeLibrary
lstrlenA
SetFilePointer
lstrcmpA
FindResourceA
CreateFileA
TlsGetValue

user32

DefWindowProcA
EndDialog
GetDlgItem
GetMenuState
TranslateAcceleratorA
EnableMenuItem
ReleaseDC
CreateWindowExA
GetWindowLongA
CharUpperBuffA
InvalidateRect
MessageBoxA
SetWindowLongA
GetAsyncKeyState
GetMenu
GetForegroundWindow
TranslateMessage
IsDialogMessageA
GetDC
RegisterWindowMessageA
SendMessageA
SetFocus
GetClientRect
wsprintfA
CallNextHookEx
LoadIconA
LoadStringA
SetForegroundWindow
GetSubMenu
KillTimer
SendDlgItemMessageA
PostQuitMessage
RegisterClassExA
CreateDialogParamA
GetWindowRect
SetTimer
GetMessageA
SetCursor
DestroyWindow
ClientToScreen
SetWindowsHookExA
CheckRadioButton
DrawMenuBar
IsDlgButtonChecked
RedrawWindow
BeginPaint
SetCapture
EndPaint
SetCaretPos
CreateCaret
GetCursorPos
DestroyCaret
SetScrollPos
SetScrollRange
ShowCaret
CharPrevA
MessageBeep
GetFocus
ScreenToClient
HideCaret
GetSysColor
SetWindowPos
CheckDlgButton
LoadAcceleratorsA
ShowWindow
GetActiveWindow
PostMessageA
DispatchMessageA
UnhookWindowsHookEx
GetSystemMetrics
SetWindowTextA
UpdateWindow
EnableWindow
CallWindowProcA
FindWindowA
LoadCursorA
GetDlgItemTextA
DialogBoxParamA
SetDlgItemTextA
CheckMenuItem
MoveWindow
ReleaseCapture
DestroyCursor

gdi32

EndDoc
StartDocA
SetTextColor
GetDeviceCaps
DeleteDC
StartPage
LineTo
EndPage
MoveToEx
SetBkColor
SelectObject
GetStockObject
CreateDCA
GetTextMetricsA
TextOutA

comdlg32

GetSaveFileNameA
PrintDlgA
GetOpenFileNameA

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8af1322ce860d4f7039f4411b6f9717c

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 308KB - Virtual size: 307KB

.rdata Size: 75KB - Virtual size: 75KB

.data Size: 54KB - Virtual size: 158KB

.rsrc Size: 5.3MB - Virtual size: 5.3MB

.reloc Size: 59KB - Virtual size: 59KB

.text
Size: 308KB - Virtual size: 307KB

.rdata
Size: 75KB - Virtual size: 75KB

.data
Size: 54KB - Virtual size: 158KB

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

.reloc
Size: 59KB - Virtual size: 59KB