6fc92d99259179b090d8a8e52f097cb4

Sharing

Copy URL Twitter E-mail

General

Target

6fc92d99259179b090d8a8e52f097cb4
Size

36KB
MD5

6fc92d99259179b090d8a8e52f097cb4
SHA1

8446831248492875045e24bdf6fabcb084cff44c
SHA256

e17867e345a603a042094e3b955fa871d52482d0804f6b63891a97c9c06d6e4d
SHA512

5a975e8bfe764c8334e5f35473591612a92e5f5e18af56ff3b0a9c8fa402b75d7cba71f5b841dc395662d9dd5be2ea246a4675b7202d83b9a0569c4ca2e7f086
SSDEEP

384:fd9mqL+ffAf2hWVnZ4YU4hPmuSbz2FvLuMlVdxNele1I:fd9TL+wf4WVnZ4/4gfbUvLdlal4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc92d99259179b090d8a8e52f097cb4

Files

6fc92d99259179b090d8a8e52f097cb4
.exe windows:4 windows x86 arch:x86

0c4cbe92dc372cecdd77827e44daf3de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
SetLastError
TerminateProcess
GetCurrentProcess
GetEnvironmentVariableA
GetLastError
OpenProcess
lstrcmpiA
GetVersion
GetModuleFileNameA
Sleep
GlobalAlloc
GetTempPathA
CreateFileA
WriteFile
CloseHandle
WinExec
lstrlenA
lstrcatA
GetCurrentThread
GetStartupInfoA
GetModuleHandleA
UnmapViewOfFile
SetEndOfFile
GetFileSize
CopyFileA
SetFilePointer
GetTempFileNameA
lstrcpyA
MapViewOfFile
CreateFileMappingA
MultiByteToWideChar
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
GetFullPathNameA

user32

wsprintfA

advapi32

RegCloseKey
OpenSCManagerA
OpenServiceA
CreateServiceA
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueExA
CloseServiceHandle

shell32

ShellExecuteA

psapi

EnumProcesses
GetModuleFileNameExA

wininet

HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile
HttpSendRequestA

urlmon

ObtainUserAgentString

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.flat
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c4cbe92dc372cecdd77827e44daf3de

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

psapi

wininet

urlmon

msvcrt

Sections

.flat Size: 20KB - Virtual size: 16KB

.text Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 300B

.flat
Size: 20KB - Virtual size: 16KB

.text
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 300B