69f2601b043fee9dba0a1457c33ff22d

General

Target

69f2601b043fee9dba0a1457c33ff22d
Size

107KB
MD5

69f2601b043fee9dba0a1457c33ff22d
SHA1

52f4c9c755f9befa4cd16a1a4931fb6c433cec67
SHA256

f86fff14e88b292d076d67cd5d184d5cf587d0cfedb21fcf3d7dcf7c1c798cab
SHA512

6394b34ff88ac14a338773837c7ea3fd8995d0885e4ade033b640ba717cb89d178f60e0e842d206c28500ff5f287a46a9052b6915fcf87878a0de843fba5042c
SSDEEP

1536:l2qSkVCVQCpIabK4Wis798nnd3cUs4u3w14pN+z0kTqAqqAL0+DGIDmC2/vY0KEe:lTSkVCVPPN60YrwYRdIMGIyC2/v5jI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69f2601b043fee9dba0a1457c33ff22d

Files

69f2601b043fee9dba0a1457c33ff22d
.exe windows:4 windows x86 arch:x86

fe2557c4101fa916de79e43bac17cfcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_setmode
ceil
_purecall
ungetc
__p__fmode
_exit
strchr
_errno
_initterm
localtime
_get_osfhandle
atoi
_ultoa
_adjust_fdiv
_wcsicmp
_XcptFilter
__set_app_type
strtol
__setusermatherr
_write
_strlwr
__initenv
sqrt
signal
memset
__p__commode
exit
_except_handler3
qsort
_acmdln
_wtoi

kernel32

FileTimeToSystemTime
GetLocaleInfoW
MulDiv
GetModuleHandleA
GlobalUnlock
CreateProcessA
DeleteFileA
VirtualProtect
FormatMessageA
GetShortPathNameA
GetVersionExW
RaiseException
FreeEnvironmentStringsA
GetStartupInfoA
GetVersionExA
ExpandEnvironmentStringsA
GlobalAlloc
FileTimeToDosDateTime
IsDBCSLeadByte
CopyFileA

user32

SetScrollInfo
GetSysColor
GetWindowRect
RegisterWindowMessageA
IsChild
CreateWindowExA
RegisterClipboardFormatA
GetSysColorBrush
SetScrollPos
SendDlgItemMessageA
LoadCursorA
GetMenuState
SetCursor
FrameRect
WinHelpA

advapi32

RegQueryInfoKeyA
RegEnumKeyW
CopySid
OpenServiceA
LookupPrivilegeValueA
CloseServiceHandle
InitiateSystemShutdownA
CryptGenRandom
RegQueryValueExA
AddAccessAllowedAce
SetSecurityDescriptorGroup
DeregisterEventSource
RegEnumKeyExW
AdjustTokenPrivileges
DeleteService

oleaut32

VariantInit
SafeArrayGetUBound
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SafeArrayCreate
GetErrorInfo
GetActiveObject

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe2557c4101fa916de79e43bac17cfcc

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

oleaut32

Sections

.text Size: 57KB - Virtual size: 57KB

.data Size: 17KB - Virtual size: 16KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 57KB - Virtual size: 57KB

.data
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 32KB - Virtual size: 31KB