6a0894199a3c06d6442d0996e4be05b2

Sharing

Copy URL Twitter E-mail

General

Target

6a0894199a3c06d6442d0996e4be05b2
Size

153KB
MD5

6a0894199a3c06d6442d0996e4be05b2
SHA1

629d2200c5060b781a755e6df255e03b27d0222b
SHA256

98c2162c7cb4ca3a1e4286fb2a4bb0ed9c41a3290bce13fbc7b872e9590e05e1
SHA512

273333648f0e77419c3fb607072c67a53232ee127e32e1e991de24168459935af417b022bf9d5c726602ce8b2911a9031a3fb5894bedd69c99352e5b0f36d17f
SSDEEP

3072:BJhxRdq0uFV2xHnkt+Hboqo+M3unofTqVdJEoWHHRwczeRQWC:xlKgnlboqtHCTsbwqu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0894199a3c06d6442d0996e4be05b2

Files

6a0894199a3c06d6442d0996e4be05b2
.exe windows:4 windows x86 arch:x86

c50032cd8601467cb60f811ae62a17cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnregisterClassA
CloseClipboard
DestroyCursor
AdjustWindowRectEx
CreateWindowExA
GetWindowLongW
WaitMessage
CharToOemA
SetMenu
FillRect
GetSystemMetrics
SetWindowsHookExA
UpdateWindow
BeginPaint
SetScrollRange
SetCapture
DrawMenuBar
GetSystemMenu
MapVirtualKeyA
SetWindowPos
GetMessagePos
GetPropA
SetWindowLongA
CreateMenu
GetKeyboardLayout
DeleteMenu
SetWindowTextA
LoadKeyboardLayoutA
IntersectRect
DrawFrameControl
SetScrollInfo
GetLastActivePopup
GetWindowThreadProcessId
EnableWindow
EnableScrollBar
GetCursor
CallWindowProcA
SetScrollPos
CheckMenuItem
EnumThreadWindows
GetKeyboardLayoutNameA
CreatePopupMenu
GetKeyboardState
IsZoomed
EmptyClipboard
IsChild
GetSysColor
InvalidateRect
IsRectEmpty
GetClipboardData
PostQuitMessage
MoveWindow
CharLowerBuffA
ScreenToClient
PtInRect
GetWindowTextA
SetTimer
GetSubMenu
DefMDIChildProcA
CharNextW
CreateIcon
SetFocus
GetCursorPos
IsWindowEnabled
EnumChildWindows
ActivateKeyboardLayout
SetWindowLongW
GetCapture
ReleaseDC
ChildWindowFromPoint
EqualRect
EnableMenuItem
OemToCharA
IsIconic
DefWindowProcA
IsWindow
InflateRect
GetActiveWindow
GetScrollInfo
DrawTextA
GetWindowLongA
SetClipboardData
ScrollWindow
FrameRect
IsWindowUnicode
KillTimer
GetWindowDC
ClientToScreen
DestroyMenu
DestroyWindow
MapWindowPoints
ShowOwnedPopups
LoadIconA
FindWindowA
GetDlgItem
DrawEdge
SetParent
SetActiveWindow
GetSysColorBrush
SetRect
OffsetRect
GetMenuItemID
GetDC
GetMenuItemCount
InsertMenuItemA
SetForegroundWindow
GetScrollRange
RemovePropA
WindowFromPoint
TrackPopupMenu
CharUpperBuffA
IsDialogMessageW
DispatchMessageA
InsertMenuA
PostMessageA
MessageBeep
EnumWindows
DrawIcon
OpenClipboard
LoadCursorA
DrawAnimatedRects
MessageBoxA
ShowWindow
ShowScrollBar
GetKeyNameTextA
GetWindowRect
GetMenuStringA
GetClassInfoA
GetWindowPlacement
SetPropA
GetClassLongA
RegisterWindowMessageA
MsgWaitForMultipleObjects
RedrawWindow
wsprintfA
SetCursor
GetFocus
DrawIconEx
DestroyIcon
LoadStringA
LoadBitmapA
CharNextA
TranslateMDISysAccel
IsDialogMessageA
RegisterClassA
PeekMessageW
PeekMessageA
IsWindowVisible
SetMenuItemInfoA
SendMessageW
SendMessageA
GetIconInfo
GetKeyboardLayoutList
DefFrameProcA
GetMenuState
GetKeyboardType
SetClassLongA
GetMenuItemInfoA
GetMenu
GetKeyState
GetScrollPos
GetDesktopWindow
RemoveMenu
GetParent
ReleaseCapture
EndPaint
GetWindow
GetTopWindow
TranslateMessage
SystemParametersInfoA
CallNextHookEx
UnhookWindowsHookEx
CharLowerA
GetClientRect
DispatchMessageW
SetWindowPlacement
RegisterClipboardFormatA
GetForegroundWindow
GetClassNameA

msvcrt

sin
memcpy

kernel32

ExitThread
VirtualAlloc
SetFilePointer
LocalAlloc
GetLastError
MoveFileA
DeleteFileA
GetSystemDefaultLangID
GetThreadLocale
MulDiv
ResetEvent
SetErrorMode
SetLastError
GlobalAddAtomA
GetCurrentProcessId
ExitProcess
SetEndOfFile
FormatMessageA
GetDiskFreeSpaceA
GlobalFindAtomA
FreeLibrary
WaitForSingleObject
VirtualQuery
GetCPInfo
Sleep
HeapAlloc
MoveFileExA
LoadResource
GetFileType
SetThreadLocale
GetLocaleInfoA
GetVersionExA
GetDateFormatA
CreateFileA
GetACP
GetFileSize
GetEnvironmentStrings
DeleteCriticalSection
GetCurrentThread
LocalFree
GetVersion
GetLocalTime
GetTickCount
GetModuleHandleA
LoadLibraryA
GetStringTypeA
CreateEventA
EnumCalendarInfoA
GetStartupInfoA
GetModuleFileNameA
FindFirstFileA
GetProcAddress
HeapDestroy
InitializeCriticalSection
RaiseException
GetCommandLineA
EnterCriticalSection
GetCurrentThreadId
ReadFile
LockResource
lstrlenA
LocalReAlloc
GlobalAlloc
CreateThread
GlobalDeleteAtom
lstrcmpiA
SizeofResource
lstrcpyA
LoadLibraryExA
GetOEMCP
GetStdHandle
GetFileAttributesA
SetEvent
HeapFree
lstrcatA
CompareStringA
GetCurrentProcess
FindClose
VirtualAllocEx
FreeResource
GetFullPathNameA
CloseHandle
lstrcmpA
GetProcessHeap
lstrcpynA
GetUserDefaultLCID
VirtualFree
WriteFile
FindResourceA

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c50032cd8601467cb60f811ae62a17cc

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

Sections

CODE Size: 33KB - Virtual size: 33KB

.rdata Size: 512B - Virtual size: 120KB

.tls Size: 118KB - Virtual size: 117KB

CODE
Size: 33KB - Virtual size: 33KB

.rdata
Size: 512B - Virtual size: 120KB

.tls
Size: 118KB - Virtual size: 117KB