6cc1769138bedcea2e327091ad9c80dc

General

Target

6cc1769138bedcea2e327091ad9c80dc
Size

244KB
MD5

6cc1769138bedcea2e327091ad9c80dc
SHA1

1e0694cf87c23548cd8d451c2f0d2c4bdc0d3afb
SHA256

26a90bf29d40d1250d83460e5edb6190b0c68d3eafeb0daff3517d5d3ba33c8c
SHA512

69fa6c3f6e9de87bb8c8559f4291209d7709abd7c130214d81c48035f1e8843fa621c0bf9f7b3d82335d05173da539f6a9b1f659b619712abe3fb07d0202860b
SSDEEP

768:wu6bszMvp3XkCBRWsEBBQARQk8flWdAVN:huJ5RWsEBBQARMUAVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cc1769138bedcea2e327091ad9c80dc

Files

6cc1769138bedcea2e327091ad9c80dc
.dll windows:4 windows x86 arch:x86

213411aa0dfc29375d0df43d24261aec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

strstr
memcpy
memcmp
_snprintf
RtlZeroMemory
RtlUnwind
strlen

ws2_32

closesocket
gethostname

kernel32

WriteFile
CloseHandle
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
IsBadReadPtr
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA
CreateFileMappingA
CreateProcessA
DeleteFileA
GetExitCodeThread
GetFileSize
GetLastError
GetStartupInfoA
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
MapViewOfFile
MoveFileExA
ReadFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtectEx
WideCharToMultiByte

user32

SetWindowsHookExA
wsprintfA
CallNextHookEx
FindWindowA
GetWindowThreadProcessId
KillTimer
RegisterWindowMessageA
SendMessageA
SetTimer
UnhookWindowsHookEx

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

Sections

.text
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

213411aa0dfc29375d0df43d24261aec

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

advapi32

Sections

.text Size: 228KB - Virtual size: 224KB

.bss Size: - Virtual size: 8B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 228KB - Virtual size: 224KB

.bss
Size: - Virtual size: 8B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 1KB