60479dc9e8d074b23d71c0ba19076b65

General

Target

60479dc9e8d074b23d71c0ba19076b65
Size

24KB
MD5

60479dc9e8d074b23d71c0ba19076b65
SHA1

33ec84f047c4a822d44832cf1ee0bea0bbefd7dc
SHA256

48d0c99d55a2604ef318087f113e03f24bba284845e8bc40cab8ec2769e9abaf
SHA512

9afb72e4494971022baf0858d232fcd8f86fd2b78b3ba9dcb50137cd3b04566048e356164e9d21f9ff16ab6acf190c5e32fed7eaee2b6b56e0ac8283cfd69448
SSDEEP

384:Oc+L3xrRI46Vt9Wt5ugIagRjjcz73OWjqZ/23Nb1/iXHpuyeE4Fto6iLt:OcMlRI4iU5Yaycz73O4qZ/2JhmHpuye2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60479dc9e8d074b23d71c0ba19076b65

Files

60479dc9e8d074b23d71c0ba19076b65
.exe windows:4 windows x86 arch:x86

1a4100591c908c880b5795759ef35a53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
CreateMutexA
OpenMutexA
CreateFileA
lstrcatA
lstrcpyA
Sleep
InterlockedDecrement
WideCharToMultiByte
lstrlenW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
TerminateProcess
CreateToolhelp32Snapshot
GetLocalTime
ReadFile
SetFilePointer
SetFileAttributesA
WriteFile
FindFirstFileA
GetModuleFileNameA
GetTempPathA
CreateThread
GetWindowsDirectoryA
LoadLibraryA
Process32First
Process32Next
CloseHandle
LocalFree
GetLastError
OpenProcess
DeleteFileA

user32

CharUpperA
GetWindowThreadProcessId
SendMessageA
FindWindowExA
wsprintfA
FindWindowA

advapi32

BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA

shell32

SHChangeNotify

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

SysAllocStringLen
SysStringByteLen
VariantInit
SysFreeString
VariantCopy
SysStringLen
VariantClear
SysAllocString
GetErrorInfo

shlwapi

SHDeleteValueA
SHSetValueA
SHDeleteKeyA

msvcrt

_controlfp
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_CxxThrowException
rename
_except_handler3
memset
sprintf
strchr
memcmp
??2@YAPAXI@Z
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
strlen
__CxxFrameHandler
_EH_prolog
_strupr
_wcsupr
wcsstr
memcpy
??3@YAXPAX@Z
__p___initenv

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a4100591c908c880b5795759ef35a53

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 21KB - Virtual size: 20KB

.text
Size: 21KB - Virtual size: 20KB