6591f25a389ed612aea0eaab62973eb4

General

Target

6591f25a389ed612aea0eaab62973eb4
Size

60KB
MD5

6591f25a389ed612aea0eaab62973eb4
SHA1

ab9340627233086178f06b03a7a569f4b34b2853
SHA256

7f27ca5e186c5d61538e560175fc191fcbab02d3968015423a61b3bd6ccd24e9
SHA512

b691bfad3708d5498eeabac74e3e1e96c51042aca5decf7fbcccfdbe431d8614461104ee37f506d4e28da839255e91d364b053d0676c5c9f26692eea9415a0a4
SSDEEP

1536:myyvUrTZeGD525DFtYLV2iL6OGuF1h1YGnZyFfz/F30Gi3dAi7:myysrteGD+Hsh6elZydZrUdAe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6591f25a389ed612aea0eaab62973eb4

Files

6591f25a389ed612aea0eaab62973eb4
.exe windows:4 windows x86 arch:x86

5dfdcbaa2d3f5cf0c103ea94807f736f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
FindAtomA
GetEnvironmentVariableA
CloseHandle
IsBadCodePtr
GetTickCount
GetExitCodeThread
GetFileSize
ReleaseMutex
FindVolumeClose
CreateFileA
VirtualAlloc
HeapDestroy
SetEndOfFile
GetCommandLineA
ExitProcess
ResetEvent
GetCurrentDirectoryA
DeleteFileA
EnterCriticalSection
SetFileAttributesA
HeapSize
WaitForSingleObject
FindVolumeClose
GetModuleHandleA

wininet

DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpPutFileA
FindCloseUrlCache
FtpOpenFileA
FtpGetFileW
HttpEndRequestA
DeleteUrlCacheEntryA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpCreateDirectoryW
FtpDeleteFileA

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tdiugox
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5dfdcbaa2d3f5cf0c103ea94807f736f

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

tdiugox Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

tdiugox
Size: - Virtual size: 4KB