69bbd8c6d0842c0e32c97a84fbfbf20d

Sharing

Copy URL Twitter E-mail

General

Target

69bbd8c6d0842c0e32c97a84fbfbf20d
Size

174KB
MD5

69bbd8c6d0842c0e32c97a84fbfbf20d
SHA1

02b7c296a805a8d80c63776d5a17c49ae39bd4ef
SHA256

45c0c6504fb508894aef2501ca91a23a61a6f22860dafa03e937323aa5c3d319
SHA512

93d6c00dc93e42c0e6f1c450272f1a21ac9af5251f977746c363d78610db2386cabcd38bfc5f34bccc8b14f2bb49e83e58436347d6eb835bde24b6321fd5fc94
SSDEEP

3072:GgrKftOEUaJCYwoxgyBuiAvq9Zv+X7LkAJqQ:JKtiGFuisq9ZmroA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69bbd8c6d0842c0e32c97a84fbfbf20d

Files

69bbd8c6d0842c0e32c97a84fbfbf20d
.exe windows:4 windows x86 arch:x86

dc445d98f6564349eafdf7a2c93e10c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

MkParseDisplayName
CoGetContextToken

shell32

SHFileOperationA
SHGetDiskFreeSpaceA
SHGetDesktopFolder
SHGetDiskFreeSpaceA

user32

GetScrollRange
OpenClipboard
SetCursor
DrawAnimatedRects
GetClassNameA

comctl32

ImageList_Draw
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Read
ImageList_Add
ImageList_Remove

kernel32

GetModuleHandleA
GlobalAlloc
GetCommandLineW
GetModuleHandleW
ExitThread
GetLastError
GetProcAddress
ExitProcess
GetVersionExA
LoadLibraryExA
IsBadReadPtr
VirtualAlloc

version

VerQueryValueA
VerQueryValueA
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA

shlwapi

SHEnumValueA
SHStrDupA
SHDeleteValueA
SHGetValueA
PathFileExistsA
PathIsDirectoryA
PathGetCharTypeA
SHQueryInfoKeyA
SHDeleteKeyA
PathIsContentTypeA
SHQueryInfoKeyA
SHDeleteValueA

msvcrt

sin
srand
strcmp
memset

gdi32

SetTextColor
CreateDIBitmap
SetBkColor
SetPixel
CreateBitmap
GetBitmapBits
RestoreDC

advapi32

RegQueryValueExA
RegQueryInfoKeyA
RegLoadKeyA
GetLengthSid
RegCreateKeyExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA

comdlg32

GetOpenFileNameA
ChooseColorA

oleaut32

SafeArrayCreate
SysAllocStringLen
SysFreeString
VariantCopyInd
VariantChangeType
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayGetElement
RegisterTypeLib

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 235B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data8
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc445d98f6564349eafdf7a2c93e10c4

Headers

File Characteristics

Imports

ole32

shell32

user32

comctl32

kernel32

version

shlwapi

msvcrt

gdi32

advapi32

comdlg32

oleaut32

Sections

.text Size: 45KB - Virtual size: 45KB

DATA Size: 512B - Virtual size: 482B

.data7 Size: 512B - Virtual size: 235B

.data2 Size: 1KB - Virtual size: 1KB

.data8 Size: 119KB - Virtual size: 119KB

.data4 Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 996B

.text
Size: 45KB - Virtual size: 45KB

DATA
Size: 512B - Virtual size: 482B

.data7
Size: 512B - Virtual size: 235B

.data2
Size: 1KB - Virtual size: 1KB

.data8
Size: 119KB - Virtual size: 119KB

.data4
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 996B