6a1ec62a67c8e3b29938f6eae4f0669b

Sharing

Copy URL Twitter E-mail

General

Target

6a1ec62a67c8e3b29938f6eae4f0669b
Size

72KB
MD5

6a1ec62a67c8e3b29938f6eae4f0669b
SHA1

f23d9e9889de9d5b6fa5c70d734ae3bd42f6ca79
SHA256

c6ec0e051d1f78547e6e6b980770414c9e0165ce5253424017ad9ec7cbbb4b4e
SHA512

0f9ecabc7b84d6e4ded2160d58696277af98520ff1e9413f9422847f90fd217520d2dcedcef43653f926c253f542709a1feb3783a723b9b16ed28606c2e4fb79
SSDEEP

1536:+VDzP4Gr9TAvkU6WQsNpOZyhV4D8VPV/QNI/:sQ49EvkUlQEMQVVRV/QNM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a1ec62a67c8e3b29938f6eae4f0669b

Files

6a1ec62a67c8e3b29938f6eae4f0669b
.exe windows:4 windows x86 arch:x86

e89f4b61f9a780e49ecb993a6c0b45f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegQueryValueW
RegOpenKeyExW
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExW
RegDeleteKeyW
RegReplaceKeyA
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegReplaceKeyW
RegLoadKeyW
RegOpenKeyA
RegDeleteValueW
RegFlushKey
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyW
RegEnumKeyW
RegLoadKeyA
RegQueryInfoKeyW
RegEnumKeyA
RegOpenKeyW
RegGetKeySecurity
RegEnumValueW
RegQueryValueExA
RegEnumKeyExA
RegQueryValueA
RegQueryInfoKeyW
RegDeleteValueA
RegQueryInfoKeyA
RegQueryValueExW
RegFlushKey
RegCreateKeyExW
RegQueryValueA
RegReplaceKeyA
RegLoadKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyW
RegOpenKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueW
RegQueryValueW
RegEnumKeyExW
RegLoadKeyA
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
RegEnumValueA
RegGetKeySecurity
RegEnumValueW
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyW
RegReplaceKeyW

user32

GetWindowTextA
IsMenu
AlignRects
BlockInput
GetMenu
AppendMenuW
GetCursor
GetDC
DialogBoxParamW
InsertMenuA
LoadCursorA
LoadMenuA
DrawTextW
CloseWindow
GetWindowTextLengthA
CalcMenuBar
AppendMenuA
DrawIcon
IsWindow
CopyIcon
EndDialog
CopyImage
DrawIconEx
DrawTextA
GetDlgItem
CreateIcon
CopyRect
DialogBoxParamA
GetFocus

kernel32

CloseHandle
GetModuleHandleA
CloseHandle
GetLastError
CloseHandle
GlobalFree
CloseHandle
DeleteFileA
CloseHandle
lstrcmpA
CloseHandle
ExitProcess
CloseHandle
FreeLibrary
CloseHandle
GetStdHandle

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.d57a
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r26ta
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e89f4b61f9a780e49ecb993a6c0b45f1

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 14KB - Virtual size: 14KB

.d57a Size: 48KB - Virtual size: 47KB

.r26ta Size: 5KB - Virtual size: 80KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 14KB

.d57a
Size: 48KB - Virtual size: 47KB

.r26ta
Size: 5KB - Virtual size: 80KB

.rsrc
Size: 1024B - Virtual size: 4KB