67c506289d299c36e39d01e5debcb9d5

Sharing

Copy URL

Twitter E-mail

General

Target

67c506289d299c36e39d01e5debcb9d5
Size

188KB
MD5

67c506289d299c36e39d01e5debcb9d5
SHA1

161b760d6e121695dd3bbe0440b91dd34f6a7248
SHA256

e22dcf070be3b40d0dd95e30dc9977cc1cfc89f6d31fd2ced4131fa99d644628
SHA512

bea37b79267d25c241daf072567d087cac3c2a1520ee61533660fe1347e14dedebc8575c1428d16fef8960e4f8ce54e2eb9290a314dd52e8049dbc31df75119c
SSDEEP

3072:fmyBaLbIsfawmi1Z6HTe0Lnf60ymKEJZHouvG5w3UqK1Vm76ok0UaIB6a:5mImaHa0Lni0pKA9FOrXzbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67c506289d299c36e39d01e5debcb9d5

Files

67c506289d299c36e39d01e5debcb9d5
.exe windows:4 windows x86 arch:x86

9c64bd5d75584c44db6af448ad7ae8d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetTapeParameters
GetVersion
ClearCommError
InterlockedExchange
GetLocalTime
Sleep
FindClose
EnumResourceNamesA
ExitProcess
GetCurrentProcessId
GetWindowsDirectoryA
FindFirstFileA

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

user32

ReleaseDC
IsWindow
GetWindowLongA
GetSysColor
ReleaseCapture
GetDlgItem
MoveWindow
FillRect
SetWindowLongA
GetWindowInfo
LoadCursorA
GetDC
SetWindowPos
SetCursor
SetCapture

gdi32

SetBkMode
BitBlt
DeleteDC
RestoreDC
TextOutA
GetObjectA
CreateCompatibleDC
GetTextExtentPoint32A
DeleteObject
SetTextColor
GetDeviceCaps
SaveDC
CreateSolidBrush
CreateRectRgn
DeleteMetaFile
GetStockObject
Rectangle
SelectObject
EnumFontFamiliesExA
CreateFontIndirectA
CreateCompatibleBitmap

winmm

mciSendCommandA
sndPlaySoundA

oleacc

LresultFromObject
CreateStdAccessibleObject

advapi32

RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c64bd5d75584c44db6af448ad7ae8d2

Headers

File Characteristics

Imports

kernel32

ole32

user32

gdi32

winmm

oleacc

advapi32

version

shell32

Sections

.text Size: 164KB - Virtual size: 164KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 19KB - Virtual size: 19KB

.lib Size: 512B - Virtual size: 220KB

.text
Size: 164KB - Virtual size: 164KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 19KB - Virtual size: 19KB

.lib
Size: 512B - Virtual size: 220KB