6cbfbd4c7982eb09ee6ddb8eb8c2165b

Sharing

Copy URL Twitter E-mail

General

Target

6cbfbd4c7982eb09ee6ddb8eb8c2165b
Size

72KB
MD5

6cbfbd4c7982eb09ee6ddb8eb8c2165b
SHA1

c1d96806c646258dcfbe6f89470a9b4695caea96
SHA256

7c47136b4b775e805468dbcb9b57006e203d7941dc9f50e186b8eecbe3cfe99c
SHA512

4979476ef1d652b055fdb55ac4193d41fc71d0152084ffdd07a122c938f9d28cfd4893f6650a2477483071d46db7656e0a85b085b3fbfb992c1e25cf2029ceeb
SSDEEP

768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4iCL:qfWeK0tgc2VVLpffqHjpp19VxRw6QLCL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cbfbd4c7982eb09ee6ddb8eb8c2165b

Files

6cbfbd4c7982eb09ee6ddb8eb8c2165b
.exe windows:4 windows x86 arch:x86

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetProcessHeap
IsBadReadPtr
DeleteFileA
ExitProcess
GlobalAlloc
WriteFile
RaiseException
WaitForSingleObject
ReadFile
lstrlenA
GetTickCount
GetCommandLineW
GetUserDefaultLCID
VirtualAlloc
GlobalFindAtomA
HeapAlloc
LoadLibraryA
LocalAlloc
GetCurrentProcessId
VirtualQuery
GetLastError
GetLocaleInfoA

user32

RegisterWindowMessageA
GetMenuStringA
SetScrollPos
SendMessageW
DispatchMessageW
SetWindowsHookExA
IsDlgButtonChecked
CharNextW
MsgWaitForMultipleObjects
GetPropA
LoadIconA
GetKeyboardLayout
DispatchMessageA
SetParent
CallWindowProcA
GetWindowLongW
SetScrollInfo
DefFrameProcA
SetClassLongA
UpdateWindow
GetLastActivePopup
KillTimer
IsCharUpperA
GetIconInfo
SetPropA
RemovePropA
DefMDIChildProcA
GetSystemMenu
IsChild
ClientToScreen
IsWindow
GetWindowPlacement
GetKeyState
TranslateMDISysAccel
GetSysColorBrush
DrawFrameControl
PostMessageA
GetKeyboardState
IsZoomed
GetSysColor
GetTopWindow
CharLowerBuffA
BeginPaint
EqualRect
IsWindowUnicode
TranslateMessage
wsprintfA
FindWindowA
SetRect
GetWindowTextA
DrawIcon
GetClientRect
GetScrollPos
EnumWindows
SetTimer
GetWindowLongA
SetCursor
PtInRect
GetMenu
DrawMenuBar
MapVirtualKeyA
PostQuitMessage
ScreenToClient
InsertMenuItemA
GetWindowRect
EndPaint
ActivateKeyboardLayout
CreatePopupMenu
WindowFromPoint
SetCapture
DrawTextA
GetClassInfoA
GetActiveWindow
GetWindowTextLengthA
DestroyMenu
SetWindowPos
SetMenu
IsWindowEnabled
ShowWindow
DefWindowProcA
ShowScrollBar
InvalidateRect
GetKeyboardLayoutList
GetMenuItemInfoA
InsertMenuA
AdjustWindowRectEx
ScrollWindow
IsDialogMessageW
SetWindowTextA
DestroyCursor
LoadStringA
GetCursorPos
RedrawWindow
UnregisterClassA
SendMessageA
IsIconic
GetKeyboardLayoutNameA
SetFocus
CallNextHookEx
EnumThreadWindows
DrawEdge
GetDesktopWindow
DestroyWindow
EnableMenuItem
RegisterClipboardFormatA
GetFocus
EmptyClipboard
IsMenu
GetMenuItemCount
LoadKeyboardLayoutA
GetForegroundWindow
CharUpperBuffA
SetClipboardData
GetMenuState
DestroyIcon

gdi32

GetDIBColorTable
SelectObject
SelectPalette
CreateFontIndirectA

ole32

CoRevokeClassObject
CLSIDFromProgID

comdlg32

ChooseColorA
GetFileTitleA
GetOpenFileNameA

Exports

Exports

lSgk9k4tn@12
qWST4fDOEOaPp@16
yoDcC8vk_F
_Nf3jnN@20
_d420jRrL@12

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

comdlg32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 37KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 1024B - Virtual size: 1020B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 37KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 1024B - Virtual size: 1020B