64018bcc97b3fef7f961c27474f8d74d

Sharing

Copy URL Twitter E-mail

General

Target

64018bcc97b3fef7f961c27474f8d74d
Size

18KB
MD5

64018bcc97b3fef7f961c27474f8d74d
SHA1

bafd5109ec3343bcf1fedaa4f65cdc170ff37667
SHA256

1ed2ed6ab22b4af0f887d0d127e66ab5e2638320adbc30f004191afedca92cfe
SHA512

172ceaa2f6ec4b74c27d2785148e988bf8b94a4f826b4798ff880d9e189c0ead6aa6a553894a3a13744faa5e00d32fd3d43db5434bf83577a364a05f64b238db
SSDEEP

192:CwylxObCHTSuLGoHSpFImJiyeMMGjXhoH/+kFO6gUHMIjrEt2MXW:CwkrLpH0WuZeBOGH/+kFOUCXW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64018bcc97b3fef7f961c27474f8d74d

Files

64018bcc97b3fef7f961c27474f8d74d
.exe windows:5 windows x86 arch:x86

160d0ffb2ff0d58cadf49f3ae9bf23d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PrintDlgA
GetOpenFileNameA
GetSaveFileNameA

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetCloseHandle
DeleteUrlCacheEntryW
InternetCombineUrlW

user32

DestroyMenu
ShowOwnedPopups
GetAsyncKeyState
CharUpperA
GetMessageTime
GetMessageA
PostQuitMessage
wvsprintfA
ValidateRect

ole32

StgIsStorageFile
CoRevokeClassObject
CoUninitialize
CoInitialize
OleSetClipboard
OleDuplicateData
StgOpenStorage

kernel32

GetDriveTypeA
GetCurrentThreadId
SystemTimeToFileTime
SetEnvironmentVariableA
FindNextFileA
GlobalWire
ReadFile
WaitForMultipleObjects
DuplicateHandle
SetEvent
GetTickCount
SetLastError
GetSystemTimeAsFileTime
GetEnvironmentVariableA
GlobalFindAtomA
WriteFile
GetShortPathNameW
Sleep
CreateProcessA
LocalFileTimeToFileTime
IsValidLanguageGroup
GetCurrentProcess
CopyFileExW
ReleaseActCtx
GetDiskFreeSpaceA
GetVersionExA
GetNumberFormatA
EnumSystemCodePagesW
GetCommandLineA
FormatMessageA
DeleteFileA
CloseHandle
GetPrivateProfileIntW
SetHandleInformation
FindFirstFileA
GetExitCodeProcess
LeaveCriticalSection
GetCurrentProcessId
EnterCriticalSection
GetSystemTime
SetEndOfFile
DeviceIoControl
GetThreadTimes
GlobalGetAtomNameA
SetFileTime
SetErrorMode
TerminateProcess
CreateFileA
GetFileSize
DeleteCriticalSection
GlobalDeleteAtom
QueryPerformanceCounter
HeapFree
GetProcessHeap
CopyFileA
GetProcAddress
GetFileAttributesA
GetSystemDirectoryA
SetFileAttributesA
HeapAlloc
SetUnhandledExceptionFilter
GlobalFlags
LCMapStringA
SetFilePointer
SwitchToThread
OpenEventA
MoveFileA
FlushFileBuffers
GlobalAddAtomA
LCMapStringW
QueryDosDeviceA
GetModuleFileNameA
GetCurrentDirectoryA
DosDateTimeToFileTime
FindClose
MoveFileExA
CreateEventW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 139KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

160d0ffb2ff0d58cadf49f3ae9bf23d0

Headers

File Characteristics

Imports

comdlg32

wininet

user32

ole32

kernel32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 7KB - Virtual size: 119KB

.debug Size: 5KB - Virtual size: 5KB

.pdata Size: 139KB - Virtual size: 251KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 7KB - Virtual size: 119KB

.debug
Size: 5KB - Virtual size: 5KB

.pdata
Size: 139KB - Virtual size: 251KB