6693941dbb54a73fc1ee1f8e70845db113cfbdde4134586cb80b5fd7322ef841

Sharing

Copy URL Twitter E-mail

General

Target

6693941dbb54a73fc1ee1f8e70845db113cfbdde4134586cb80b5fd7322ef841
Size

393KB
MD5

c67e0701059473825560b3c4518a9464
SHA1

06859a480f9383871930778f59552e7786f55b29
SHA256

6693941dbb54a73fc1ee1f8e70845db113cfbdde4134586cb80b5fd7322ef841
SHA512

d92b57e4731f6f7a1852c7c705244298401c84e5e54454d106efb60c4395fcbba1d44f096fbca1f31ae8db579e72767178969729dcdccc0d3f1e4dc56a26f553
SSDEEP

3072:xnZkltfphYYiJCTeiqsbBV7T7WL1XS93yLY79AVKD9gwKZisHsunYH9yZxPk+Ss:xipQbE77T7Q1XkuDsuYH90/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6693941dbb54a73fc1ee1f8e70845db113cfbdde4134586cb80b5fd7322ef841

Files

6693941dbb54a73fc1ee1f8e70845db113cfbdde4134586cb80b5fd7322ef841
.exe windows x86

c8da8f8df164f8aa348910cbb8b572f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateEventA
CreateThreadpoolWait
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetEvent
SetThreadpoolWait
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForThreadpoolWaitCallbacks

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_strrev
_unlock
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
memset
signal
strlen
strncmp
abort
vfprintf

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c8da8f8df164f8aa348910cbb8b572f5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 44B

.rdata Size: 382KB - Virtual size: 382KB

.bss Size: - Virtual size: 1008B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 44B

.rdata
Size: 382KB - Virtual size: 382KB

.bss
Size: - Virtual size: 1008B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B