06bce15738365ad928efa1045c19403f

General

Target

06bce15738365ad928efa1045c19403f
Size

190KB
MD5

06bce15738365ad928efa1045c19403f
SHA1

6f9cba335d50df5cd2e0de7287d4e24ada1e6b66
SHA256

782e33b32e535c4570ca3e5af7220241712656951097947f68c02e81420208d3
SHA512

0db733e1e273ebbfc2b566c8eda13581ae665b5b993a3ba329020b5e5503163076e7f17318127896995c98de0ba07932978e336d52b9b1e72e3688d581c9a3b2
SSDEEP

3072:vzsYMSnWEcfVCZ/8XJ9Zi1x+IvQlG1xvJGVXEU9reSANOVJV:vzZnWEcd4ur0ttxvJGVXEHSZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06bce15738365ad928efa1045c19403f

Files

06bce15738365ad928efa1045c19403f
.exe windows:4 windows x86 arch:x86

e30cbb83ed0b97ff2596e79ca2e9c93f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncpy
strstr
strrchr
strncmp
srand
memmove
_except_handler3
_ftol
tolower
_strlwr
_itoa
_strupr
malloc
memcpy
__CxxFrameHandler

kernel32

GetProcAddress
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetCommandLineA
CopyFileA
SetFilePointer
GetStartupInfoA
CreateProcessA
SetUnhandledExceptionFilter
CreateThread
GetExitCodeThread
GetTickCount
ExitThread
IsBadReadPtr
SleepEx
ExpandEnvironmentStringsA
GetShortPathNameA
CreateEventA
OpenEventA
WaitForSingleObject
GetCurrentThreadId
WriteFile
MoveFileA
GetTempPathA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
GetCurrentProcess
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
GetLastError
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetSystemDirectoryA
GetCurrentProcessId
GetCurrentThread
LoadLibraryA
Sleep

ws2_32

listen

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e30cbb83ed0b97ff2596e79ca2e9c93f

Headers

File Characteristics

Imports

msvcrt

kernel32

ws2_32

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 1KB