69d0fc16d535e74f7de5a1a7a84c7083

Sharing

Copy URL

Twitter E-mail

General

Target

69d0fc16d535e74f7de5a1a7a84c7083
Size

137KB
MD5

69d0fc16d535e74f7de5a1a7a84c7083
SHA1

d1c5fe96c04f3a21fbdadb253be3416abd7f1298
SHA256

7eff49f5cba2c204be9911d5cca613dd2f92d74a0193f3b1f9ed68e9a05f5514
SHA512

2de2503967e1d4627888d8cc7830a3b6b6f236c5428ee8a42c70ef8974bb0d5b68a5c9633b8c847e80439311265d3ae1b0591becf0da8aa20f7465561dc6b049
SSDEEP

3072:Bj8HkShROLbYzIv0ZMqWS7tdI7jgfelN5rqtjtH:Bj8EfwMqWetdZDthH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d0fc16d535e74f7de5a1a7a84c7083

Files

69d0fc16d535e74f7de5a1a7a84c7083
.exe windows:5 windows x86 arch:x86

7cda276dce2c9aca75f67ad0f81aba4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
ResumeThread
WriteProcessMemory
VirtualProtectEx
CreateProcessA
VirtualAlloc
LoadLibraryA
Sleep
WinExec
GetModuleFileNameA
CopyFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
GetTempPathA
GetLastError
WriteFile
SetFileTime
FreeResource
IsBadReadPtr
lstrlenA
lstrcmpA
GetSystemDirectoryA
lstrcatA
CreateFileA
GetFileTime
CloseHandle
GetProcAddress
OutputDebugStringA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind

user32

wvsprintfA

advapi32

CryptAcquireContextA
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptReleaseContext
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CryptDecrypt

imagehlp

ImageUnload
ImageLoad

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7cda276dce2c9aca75f67ad0f81aba4e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

imagehlp

Sections

.text Size: 6KB - Virtual size: 6KB

.code Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 968B

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 123KB - Virtual size: 122KB

.text
Size: 6KB - Virtual size: 6KB

.code
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 968B

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 123KB - Virtual size: 122KB