6703ec16488651b55fd6d851f245acd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6703ec16488651b55fd6d851f245acd4
Size

57KB
MD5

6703ec16488651b55fd6d851f245acd4
SHA1

6292aad532078c0bc355d51835e22c9932ac6e3d
SHA256

7f22ee977d0b6d040edb273c4a4b9c83c0ba01963bc7ca61c1a02a7a591cb33f
SHA512

ca7846324f74d25395c44a0c32c31e9e8f97e69ab4098448f23c215c167ed367e25899dd964b319d9b5ec3612817cea8af215abfd80a9985a9a0e92c36103d61
SSDEEP

1536:8f43I/KKvgSx9hSzY8jPu8j05jjr46EGw6c6N6Xn:W44/KKvgS8qF5jX4dGtS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6703ec16488651b55fd6d851f245acd4

Files

6703ec16488651b55fd6d851f245acd4
.exe windows:4 windows x86 arch:x86

b102c3a8ee3c691f73ce09e33872d4d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
FindFirstFileW
lstrcpyW
RemoveDirectoryW
DeleteFileW
CreateProcessW
SetCurrentDirectoryW
CopyFileW
GetTempPathW
GetModuleFileNameW
MoveFileExW
FindNextFileW
LoadLibraryW
GetCurrentDirectoryW
lstrlenW
CloseHandle
GetLastError
CreateFileW
WaitForSingleObject
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FindClose
FreeLibrary
GetProcAddress
LCMapStringW
GetThreadLocale
GetStartupInfoW
GetModuleHandleW

user32

RegisterWindowMessageW
wsprintfW
MessageBoxW
DefWindowProcW

advapi32

RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetSpecialFolderPathW

ole32

CoUninitialize
CoInitialize

msvcrt

_XcptFilter
_wcmdln
_exit
_except_handler3
_controlfp
wcsrchr
wcscat
wcsncpy
wcslen
??3@YAXPAX@Z
__p__fmode
exit
__set_app_type
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE