6696e87deded591b0168faf05348660c

Sharing

Copy URL Twitter E-mail

General

Target

6696e87deded591b0168faf05348660c
Size

212KB
MD5

6696e87deded591b0168faf05348660c
SHA1

3db1fab231fb78929376213666fff669adc77875
SHA256

15915b967c6a93c035287bd2a9d6c355344a4a9df483b33da082568dd7e73e14
SHA512

40a16cf1f851cbca83d9131a99516ef3521ec01b90fcf40de29b77bdf8199dceda90c4a091d932f8c01a65d841bbdd5003c46c288bbce4d24cc9d3d56dba95c2
SSDEEP

6144:9LUQO61ipP4hEjmmMshNIzcg7Zd9aooCm:NOMk4Ejmm5w4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6696e87deded591b0168faf05348660c

Files

6696e87deded591b0168faf05348660c
.exe windows:1 windows x86 arch:x86

13ecfa07f06fcfdaea738423db8acca1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
SetFilePointer
ReadFile
ExpandEnvironmentStringsA
HeapCreate
GetStdHandle
GetCommandLineA
OpenEventA
HeapAlloc
GetCPInfo
lstrlenA
SizeofResource
ResetEvent
GetThreadContext
ExitProcess
lstrcpyA
GetConsoleMode
EnterCriticalSection
ExitThread
GetProcessAffinityMask
PulseEvent
GetCurrentProcessId
GetStartupInfoA
IsDebuggerPresent
InterlockedExchange
GetDateFormatA
GetConsoleCP
FreeEnvironmentStringsA
TlsFree
IsBadReadPtr
LCMapStringA
InitializeCriticalSection
LeaveCriticalSection
CreateProcessA
GetDriveTypeA
Module32Next
WaitForSingleObject
Sleep
TerminateThread
MulDiv
WaitForMultipleObjects
SearchPathA
LocalAlloc
RaiseException
SetPriorityClass
MapViewOfFile
GetEnvironmentVariableA
GlobalUnlock
HeapFree
GetVersionExA
VirtualFree
DeviceIoControl
GetEnvironmentStrings
IsBadStringPtrA
GetProcessWorkingSetSize
TlsSetValue
FindFirstFileA
GetStringTypeW
FormatMessageA
LockResource
GetTickCount
CreateFileMappingA
SetStdHandle
GetVersion
TerminateProcess
QueryPerformanceCounter
DeleteCriticalSection
GetCurrentProcess
FreeEnvironmentStringsW
GetModuleHandleW
DuplicateHandle
GetModuleFileNameA
LCMapStringW
GetNumberFormatA
InterlockedIncrement
lstrcmpA
lstrcmpiA
GlobalAddAtomA
FindClose
CreateEventA
CreateToolhelp32Snapshot
SetErrorMode
SetUnhandledExceptionFilter
VirtualQueryEx
QueryPerformanceFrequency
lstrlenW
FreeLibrary
LocalFree
ReadProcessMemory
GlobalLock
CloseHandle
FlushFileBuffers
GetModuleHandleA
GetStringTypeA
GetFileAttributesA
WriteConsoleA
GetProcessHeap
SetProcessWorkingSetSize
FindResourceA
GetTimeFormatA
GetOEMCP
GetLastError
FileTimeToLocalFileTime

user32

GetWindow
DestroyIcon
SendMessageTimeoutA
GetKeyState
UnionRect
GetParent
ExitWindowsEx
TrackPopupMenuEx
GetClientRect
CreateMenu
RegisterClassExA
SetClipboardData
EnableWindow
GetDlgItemTextA
GetClassNameA
CallWindowProcA
DialogBoxIndirectParamA
PostQuitMessage
GetMenuItemCount
DefDlgProcA
DeferWindowPos
SetTimer
GetDlgCtrlID
InflateRect
LoadIconA
AppendMenuA
GetSystemMetrics
UpdateWindow
EnumChildWindows
GetWindowDC
CheckDlgButton
SetClassLongA
MsgWaitForMultipleObjects
KillTimer
CreatePopupMenu
GetDC
DrawFrameControl
GetMenuItemID
DestroyWindow
IsDialogMessageA
IsDlgButtonChecked
GetWindowPlacement
ChildWindowFromPoint
OffsetRect
GetCapture
ModifyMenuA
LoadStringA
SetCursor
BeginDeferWindowPos
GetFocus
GetWindowLongA
LoadCursorA
FrameRect
ClientToScreen
DefFrameProcA
LoadAcceleratorsA
IsIconic
DeleteMenu
RedrawWindow
GetSubMenu
SetCapture
wsprintfA
GetDesktopWindow
CheckMenuItem
PeekMessageA
EndDeferWindowPos
InvalidateRect
EndDialog
IsZoomed
RegisterWindowMessageA
DrawEdge
GetMessageA
CreateWindowExA
CheckMenuRadioItem
EmptyClipboard
EndPaint
SetWindowPlacement
EnableMenuItem
GetSysColorBrush
SetPropA
FindWindowA
PostMessageA
MessageBoxA
RemoveMenu
IsWindowVisible
SetUserObjectSecurity
SetFocus
DrawTextA
GetDoubleClickTime
ShowWindowAsync
GetUpdateRgn
ReleaseCapture
InsertMenuA
SetWindowTextA
CheckRadioButton
EnumWindows
CreateIconIndirect
TranslateMessage
TrackPopupMenu
DialogBoxParamA
GetScrollInfo
SetMenuItemInfoA
IntersectRect
SetDlgItemTextA
PtInRect

msvcrt

__p__commode
__setusermatherr
__p__fmode
_except_handler3
_adjust_fdiv
_controlfp
_acmdln
_exit
__set_app_type
__getmainargs
_initterm
exit
memcpy
_XcptFilter

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13ecfa07f06fcfdaea738423db8acca1

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 186KB - Virtual size: 186KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 164B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 186KB - Virtual size: 186KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 164B