06957c9f00c272a3ced4b0df61e29539

General

Target

06957c9f00c272a3ced4b0df61e29539
Size

216KB
MD5

06957c9f00c272a3ced4b0df61e29539
SHA1

4902d7182c857a9ced5d8a9b1a721f06c830fc7c
SHA256

e827d66f76d8a3606e58e779c3a2f61652ef8944e1cb53f9dcd3355a79c90de4
SHA512

bdedc766ddff642d04aed7e5be2b052fc524c9544770fd819127c6ea8846b10d8d56117bbbd2ed7ee4e81b1fa434a1dc6fb844611bb2dbd7699807cb6556aa65
SSDEEP

3072:W+g8HuDTaMBOxOVB7X5Kk9fhcFq7sj3Ioa+ASTWk0t/jBe/tvKSP4j:UrTaWO46kds3IYASb0t/jBeR5gj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06957c9f00c272a3ced4b0df61e29539

Files

06957c9f00c272a3ced4b0df61e29539
.exe windows:4 windows x86 arch:x86

6d6ca8b43139e1365cf8a295f10b2b06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PurgeComm
SetPriorityClass
GetTimeFormatA
CancelTimerQueueTimer
CreateFileMappingA
GetCommProperties
AllocConsole
TransmitCommChar
GetThreadContext
GetConsoleInputExeNameA
GetEnvironmentStringsA
GetDriveTypeA
GetComputerNameA
ReleaseSemaphore
CallNamedPipeA
RemoveDirectoryA
IsBadStringPtrA
IsBadReadPtr
IsBadHugeWritePtr
VerifyVersionInfoA
OpenThread
GetSystemTime
UnmapViewOfFile
MoveFileWithProgressA
LocalShrink
GetVolumePathNamesForVolumeNameA
FindResourceA
SetEndOfFile
GetCurrencyFormatA
SetConsoleIcon
GetProfileSectionA
IsBadHugeWritePtr
GetFileSize
GetSystemTimes
CreateMutexA
SetFilePointer
GetDefaultCommConfigA
RaiseException
FreeConsole
VirtualAlloc
IsBadHugeWritePtr
RequestWakeupLatency
GetCurrentThread
GetExpandedNameA
SetThreadIdealProcessor
lstrcatA
GetStdHandle
GetProcessId
GetBinaryType
FindResourceExA
CompareFileTime
GetConsoleTitleA
GlobalDeleteAtom
SetEvent
GetTapeParameters
WriteProcessMemory
QueryPerformanceCounter
OpenFileMappingA
GetConsoleCommandHistoryLengthA

tapi32

lineAddProviderA

Sections

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 72KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d6ca8b43139e1365cf8a295f10b2b06

Headers

File Characteristics

Imports

kernel32

tapi32

Sections

.itext Size: - Virtual size: 3KB

.text Size: 72KB - Virtual size: 735KB

.idata Size: 52KB - Virtual size: 51KB

.rsrc Size: 88KB - Virtual size: 86KB

.itext
Size: - Virtual size: 3KB

.text
Size: 72KB - Virtual size: 735KB

.idata
Size: 52KB - Virtual size: 51KB

.rsrc
Size: 88KB - Virtual size: 86KB