6c9968ebdc392d8c2f9565694939024c

General

Target

6c9968ebdc392d8c2f9565694939024c
Size

140KB
MD5

6c9968ebdc392d8c2f9565694939024c
SHA1

9e9819b18fee3fd62abc1807a6fef047ee366644
SHA256

44d0eed81b9334e21140deef71576436fb08d0c51fcfcc0781c5b52d63ddc368
SHA512

37a98b878cb7210087894deb31efce9d55b235ba046ce71c078a1b6cb2b4b01531183e0fe40dd8e5b2687041107ada9c494679d3e98830d488c686f7b455f880
SSDEEP

3072:pDfgyozXuu8uumuu8uuiFr+5R26x8MGnPSNckIwJe/m:prQuu8uumuu8uuiFSPFYPWcVwYu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c9968ebdc392d8c2f9565694939024c

Files

6c9968ebdc392d8c2f9565694939024c
.exe windows:4 windows x86 arch:x86

62ef847bed66fc17c53bd770c9668e36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

ole32

CoCreateInstance
CoInitialize

kernel32

VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

62ef847bed66fc17c53bd770c9668e36

Headers

File Characteristics

Imports

user32

ole32

kernel32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 12KB

.data1 Size: 4KB - Virtual size: 44B

.rsrc Size: 28KB - Virtual size: 26KB

.grdata Size: 72KB - Virtual size: 72KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 12KB

.data1
Size: 4KB - Virtual size: 44B

.rsrc
Size: 28KB - Virtual size: 26KB

.grdata
Size: 72KB - Virtual size: 72KB