6360edf5f188dc72cdd574aaadc4a505

General

Target

6360edf5f188dc72cdd574aaadc4a505
Size

128KB
MD5

6360edf5f188dc72cdd574aaadc4a505
SHA1

c7a07a4b860a1eae98abaf6dcf36a9144512ce22
SHA256

b51648954f075f604ca148ed34d79126aa5b6cd6ea4eeb3b7502da842f87cf4b
SHA512

49ff29f1cee6dc24da7774f944a05db13e0b653f90ea1ba7ce9d7c82053d73f92707614379ce420c8b48959670d83cf7ef8547ed803c455dc8be5b3fecce4ce4
SSDEEP

3072:CtqMEM2CXkg0te/aF9LxwRC1gVHXh0gwGhhT5kB7U7cCQ3:qqB1EELSVthZwaOB7U7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6360edf5f188dc72cdd574aaadc4a505

Files

6360edf5f188dc72cdd574aaadc4a505
.exe windows:5 windows x86 arch:x86

20502395b04e9d89e16a33da1dff47db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetVersion
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
ExitProcess
GetCurrentProcess
TerminateProcess
HeapDestroy
GetStartupInfoA
GetCommandLineA
HeapCreate
VirtualFree
lstrlenA
CloseHandle
GetLastError
CreateProcessA
SearchPathA
Sleep
GetModuleHandleA
GetUserDefaultLCID

user32

DestroyMenu
GetMenuDefaultItem
CreatePopupMenu
SetCursor
LoadCursorA
LoadStringA
SendMessageTimeoutA
MessageBoxA
FindWindowA

ole32

OleInitialize
OleUninitialize

shell32

SHGetDesktopFolder

advapi32

RegCloseKey
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20502395b04e9d89e16a33da1dff47db

Headers

File Characteristics

Imports

kernel32

user32

ole32

shell32

advapi32

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 96KB - Virtual size: 96KB