61f10cf2cec2bd03f0a57b53370f5fdf

Sharing

Copy URL Twitter E-mail

General

Target

61f10cf2cec2bd03f0a57b53370f5fdf
Size

26KB
MD5

61f10cf2cec2bd03f0a57b53370f5fdf
SHA1

2d0529e63817f124b4a60c86534c54c276d22d5d
SHA256

13aa32fa64575d4255554393ffd4eabf6516982d26191fda3dd6a7739526199e
SHA512

be2b807b98cf46989950cd2fe932a294eb39785659313130c6c52711085cb4e4bd4b5c537994a695639b2aec2430cc4d062ad01147bf8a6abc2af5a25f4dbe36
SSDEEP

384:uKm5kNVZXha/HJveCAqnnzgbJWQZjlkr6aeNQ3wdRE3bwxaEIpyUJoLpzuK+W2i0:ayNgpvVgNKrd36RErw41yUkuGgAQ9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61f10cf2cec2bd03f0a57b53370f5fdf

Files

61f10cf2cec2bd03f0a57b53370f5fdf
.exe windows:4 windows x86 arch:x86

c803c7f35c27813c26451ac353edce50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathQuoteSpacesW
PathFindFileNameW
StrToIntW
StrCmpW
PathAppendW
PathRemoveFileSpecW

dbghelp

MiniDumpWriteDump
MiniDumpReadDumpStream

gdi32

CreatePen
SetTextColor
SetBkMode
SelectObject
Polyline
GetObjectW
DeleteObject
CreateFontIndirectW

shell32

ExtractIconExW
CommandLineToArgvW

user32

DispatchMessageA
EnumDisplayDevicesW
PeekMessageA
SetClassLongW
CountClipboardFormats

kernel32

SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
lstrcpynW
SetEvent
SetLastError
QueryPerformanceCounter
MapViewOfFile
LocalFree
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
InitializeCriticalSection
GlobalFree
GetWindowsDirectoryW
CloseHandle
CreateFileMappingW
CreateFileW
CreateProcessW
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetTempFileNameW
GetTempPathW
GetTickCount

imm32

ImmGetConversionListA

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c803c7f35c27813c26451ac353edce50

Headers

File Characteristics

Imports

shlwapi

dbghelp

gdi32

shell32

user32

kernel32

imm32

Sections

.text Size: 14KB - Virtual size: 16KB

.rdata Size: 6KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 16KB

.rdata
Size: 6KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 3KB