60bd16317319aeee7a7b2ac7803febfa

General

Target

60bd16317319aeee7a7b2ac7803febfa
Size

184KB
MD5

60bd16317319aeee7a7b2ac7803febfa
SHA1

3b6ae96f03e4fd204b8c88f416cd806a77350fe5
SHA256

459a2d2a41513bc93e61e9ef665b8275b3191be7e605b0850dbe514da981e293
SHA512

39a663d95d5c19ecda18db9c2d3bcda2f6bce429ba42ae7e7061278fe6b8d19eae087ade6da05856b9fac5140ce7a48e4c3fe46c01c3b64234cd5c1c0ae47d46
SSDEEP

3072:41VnnJPw5f0iKQyNj/yzqXnBNe4s0e4DBeT1Fov063EpDZzykrg:wJPw5c3N7SGhRqFov0Bl+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60bd16317319aeee7a7b2ac7803febfa

Files

60bd16317319aeee7a7b2ac7803febfa
.exe windows:4 windows x86 arch:x86

0ac5042917781b451907161eced48670

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
asin
wcschr
memset
strcmp
time
wcsncmp

kernel32

GetTickCount
lstrcpynA
MoveFileA
ExitThread
WaitForSingleObject
GetCurrentProcessId
LoadLibraryExA
VirtualAllocEx
LocalAlloc
GetCommandLineW
IsBadHugeReadPtr
ExitProcess
lstrlenA
lstrcmpiA
GetStdHandle
GetLocalTime
ReadFile
GetCommandLineA
GlobalAddAtomA
GetDateFormatA
GetFileType
FormatMessageA
GetStartupInfoA
GetFullPathNameA
MulDiv
GetModuleHandleW
GetACP
GetThreadLocale
GetFileAttributesA
LocalFree
SetThreadLocale
WideCharToMultiByte
VirtualFree
GetCurrentThreadId
SetFilePointer
GetProcAddress
HeapDestroy
GetModuleHandleA
GetCurrentThread
GlobalAlloc
LoadResource
DeleteCriticalSection
FreeResource
GetVersion
LoadLibraryA
LocalReAlloc
HeapAlloc
GetStringTypeA
SetErrorMode
IsBadReadPtr
ResetEvent
CreateEventA
VirtualQuery
LockResource

oleaut32

SysFreeString
SysStringLen
OleLoadPicture
VariantCopyInd

Sections

CODE
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ac5042917781b451907161eced48670

Headers

File Characteristics

Imports

msvcrt

kernel32

oleaut32

Sections

CODE Size: 88KB - Virtual size: 84KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 424B

.bss Size: 4KB - Virtual size: 444B

.gdata Size: 64KB - Virtual size: 61KB

.rsrc Size: 8KB - Virtual size: 7KB

CODE
Size: 88KB - Virtual size: 84KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 424B

.bss
Size: 4KB - Virtual size: 444B

.gdata
Size: 64KB - Virtual size: 61KB

.rsrc
Size: 8KB - Virtual size: 7KB