6d60fdad9123e4bf8d043e20e2dee91063d94864ebff59dc709540f6e8a7330f

General

Target

6d60fdad9123e4bf8d043e20e2dee91063d94864ebff59dc709540f6e8a7330f
Size

1.6MB
MD5

961787aa8b65387ffc503a0548c78d6b
SHA1

46c8943d585a31b0d2396ff8604dfa353a52455b
SHA256

6d60fdad9123e4bf8d043e20e2dee91063d94864ebff59dc709540f6e8a7330f
SHA512

3e91bd33e6cc2d382ba4b4beae2da424b35afcc442bd32d084b0514355869c1afe41f0458294393d64bd2629db6732e4e1b33eb068a51626abd7f476a2037bbc
SSDEEP

49152:cgZDtqXMVg2O6pCoyDo6HYcbXUPt3AsioJr9ofPMTrBP:cgZDtEMVg2O6pCoyDo6HIQsRJBQ4rl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d60fdad9123e4bf8d043e20e2dee91063d94864ebff59dc709540f6e8a7330f

Files

6d60fdad9123e4bf8d043e20e2dee91063d94864ebff59dc709540f6e8a7330f
.exe windows:5 windows x86 arch:x86

ec29083df1aec6a6221dd2d98de08acc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
WaitForSingleObject
Sleep
CreateThread
lstrlenW
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
GetModuleHandleA
FreeConsole
RtlUnwind
RaiseException
GetCommandLineA
GetLastError
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

Exports

Exports

burnuytmkjxq

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vrebz
Size: 846B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec29083df1aec6a6221dd2d98de08acc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 57KB

.bss Size: 13KB - Virtual size: 13KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 1.6MB - Virtual size: 1.6MB

.vrebz Size: 846B - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 57KB

.bss
Size: 13KB - Virtual size: 13KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 1.6MB - Virtual size: 1.6MB

.vrebz
Size: 846B - Virtual size: 4KB