6963f15a5af071507a1512e38fdcec8f

Sharing

Copy URL

Twitter E-mail

General

Target

6963f15a5af071507a1512e38fdcec8f
Size

178KB
MD5

6963f15a5af071507a1512e38fdcec8f
SHA1

de8224fa7140c81593002f593cd1ac0c71fb77ff
SHA256

28cd5dfb53f8ddcbff636b4f73cf6be5d7d83a1b78ea1c2b3093323c13ca27e8
SHA512

8294dfa3291d753663650f604e8bd08bb024e022f3ec00285bbf934d067cf0741a85279929b463893681fe27cd5c520128fd30d02af16fd76e7cc3d56d7f15b6
SSDEEP

3072:Vi4Vc398rKs1M0O59k2/k8ODncmvOfp0xcm57uV7Lm:jVc3GKsiazDxGpLMuhm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6963f15a5af071507a1512e38fdcec8f

Files

6963f15a5af071507a1512e38fdcec8f
.exe windows:5 windows x86 arch:x86

bd413965aa18045a3fea462ca1473b37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CreateProcessA
TerminateProcess
ReadFile
GetSystemDirectoryA
MultiByteToWideChar
DisconnectNamedPipe
SetCurrentDirectoryA
GetStartupInfoA
GetLastError
CreateNamedPipeA
CreatePipe
GetModuleFileNameA
GetCurrentDirectoryA
GetVersionExA
Sleep
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateFileA
GetCurrentProcess
OpenProcess
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
TerminateThread
WriteFile
ConnectNamedPipe
SetEvent
WaitForSingleObject
CloseHandle
PeekNamedPipe
GetProcessHeap
SetEndOfFile
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
ExitThread
GetCurrentThreadId
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
SetStdHandle
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId

advapi32

LookupPrivilegeValueA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
CreateProcessWithLogonW
AdjustTokenPrivileges

wininet

InternetWriteFile
DeleteUrlCacheEntry
HttpSendRequestExA
HttpQueryInfoA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpAddRequestHeadersA
HttpEndRequestA
HttpOpenRequestA

ws2_32

gethostbyname
WSAGetLastError
inet_addr
WSAStartup
inet_ntoa
gethostname

urlmon

URLDownloadToFileA

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd413965aa18045a3fea462ca1473b37

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

wininet

ws2_32

urlmon

Sections

.text Size: 121KB - Virtual size: 120KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 23KB - Virtual size: 34KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 121KB - Virtual size: 120KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 23KB - Virtual size: 34KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 10KB - Virtual size: 9KB