6369f5eeba27df0534f8dd5f4df1f044

General

Target

6369f5eeba27df0534f8dd5f4df1f044
Size

815KB
MD5

6369f5eeba27df0534f8dd5f4df1f044
SHA1

5be9fd66d976089d1328a70643650a3f848fe4c3
SHA256

46c78f568571772e252589865bee218bb477f47f771f510d3de59bac0651ed9f
SHA512

c482d0463354153e347939970d7bab6c60f79a90683cbaf1f8b3370b525b1c54f3a3793439e62db3e9bf55780dba25dbf95024351058830b2f19b83cc6055373
SSDEEP

6144:ASEp6xMy0TD6qZug8/4FN0wOFWO1Xudu5eKvCeKviyg/amXTjl:A1CqTDHZu5/qpOd1+du9vIvij/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6369f5eeba27df0534f8dd5f4df1f044

Files

6369f5eeba27df0534f8dd5f4df1f044
.exe windows:4 windows x86 arch:x86

09d7f662feb6c2965dc75614fc5e1b10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetProcAddress
lstrcpyA
MultiByteToWideChar
lstrcmpA
MoveFileA
Sleep
LoadLibraryA
InterlockedDecrement
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
SetErrorMode
GetLastError
CreateEventA
LocalFree
SetStdHandle
FlushFileBuffers
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
RtlUnwind
HeapAlloc
HeapFree
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile

user32

IsWindow
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID
CoInitialize
CLSIDFromString
OleRun
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear
GetErrorInfo

netapi32

NetUserAdd
NetLocalGroupAddMembers

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 625KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09d7f662feb6c2965dc75614fc5e1b10

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

netapi32

Sections

.text Size: 189KB - Virtual size: 188KB

.rsrc Size: 625KB - Virtual size: 624KB

.text
Size: 189KB - Virtual size: 188KB

.rsrc
Size: 625KB - Virtual size: 624KB