6dfbc49010cf6b96bb507e00a40d7985

Sharing

Copy URL Twitter E-mail

General

Target

6dfbc49010cf6b96bb507e00a40d7985
Size

11.3MB
MD5

6dfbc49010cf6b96bb507e00a40d7985
SHA1

00246dddc1846c36f7c501717b99782dda5ffb43
SHA256

60e121d41ae5b872b95a3926f310879ddcc5027117df9ff1dd59e96ac3890b02
SHA512

5b5356acca3775a66146cbd40f29b685c5cced65cff79c2ddbf88664de11bfa46cd94e9a89d45ffc9ce4064ed5847c561d76db72fb9bc6c7939c192d90a995a7
SSDEEP

196608:AyrxaOl25b3ZDxLwPyo1hxjQtDEuKlverOGJAZrH0vtLJZP5q6oxhofrNZ9KX:R1aOE5b3ZRYyGctIbwORr0vXZP5qXMfA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dfbc49010cf6b96bb507e00a40d7985

Files

6dfbc49010cf6b96bb507e00a40d7985
.exe windows:4 windows x86 arch:x86

995387b4581fe41b6f4866c97fa7599b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
SetErrorMode
FreeLibrary
GetProcAddress
RemoveDirectoryA
DeleteFileA
GetDriveTypeA
FindNextFileA
GetFileAttributesA
CreateDirectoryA
MoveFileA
GetSystemInfo
GetVersion
OpenProcess
GetLastError
GetWindowsDirectoryA
SetUnhandledExceptionFilter
TerminateThread
WaitForSingleObject
CreateThread
SetCurrentDirectoryA
GetCurrentDirectoryA
SetFilePointer
GetCurrentProcess
GetCurrentProcessId
GetThreadContext
VirtualQuery
IsBadWritePtr
GlobalMemoryStatus
CreateToolhelp32Snapshot
Process32First
FindFirstFileA
GetModuleFileNameA
GetVersionExA
FindClose
GetDiskFreeSpaceA
Process32Next
GetTempPathA
InterlockedIncrement
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
WriteFile
LoadResource
FreeResource
FindResourceA
LocalAlloc
SizeofResource
LockResource
LocalFree
LocalLock
LocalUnlock
GetOEMCP
HeapAlloc
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
FileTimeToSystemTime
HeapFree
GetCurrentThreadId
HeapReAlloc
SetStdHandle
VirtualAlloc
FlushFileBuffers
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
LCMapStringA
ReadFile
RaiseException
RtlUnwind
VirtualFree
InitializeCriticalSection
HeapDestroy
GetEnvironmentVariableA
HeapCreate
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
SetEnvironmentVariableW
GetFullPathNameA
FileTimeToLocalFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
SetFileAttributesA
GetCPInfo
GetACP
UnhandledExceptionFilter
CompareStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
HeapSize
GetEnvironmentStringsW
GetFileType
WideCharToMultiByte
GetEnvironmentStrings
GetStdHandle
SetHandleCount
DeleteCriticalSection

user32

TranslateMessage
DispatchMessageA
CharUpperA
DefWindowProcA
GetMessageA
PostThreadMessageA
DestroyWindow
CreateWindowExA
RegisterClassA
PeekMessageA
PostQuitMessage
IsDialogMessageA
SetWindowTextA
MessageBoxA
LoadStringA
FindWindowA
GetSysColor
IsWindow
CreateDialogIndirectParamA
GetParent
SetWindowPos
GetWindowRect
UpdateWindow
SystemParametersInfoA
EndDialog
GetDC
InvalidateRect
SendDlgItemMessageA
CharNextA
CharPrevA
SendMessageA
GetSystemMetrics
LoadIconA
CharLowerA
ReleaseDC

advapi32

RegSetValueExA
RegCreateKeyA
RegCloseKey
AllocateAndInitializeSid
EqualSid
OpenProcessToken
RegQueryValueExA
RegOpenKeyA
GetTokenInformation
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueA
RegDeleteValueA
RegQueryValueA
RegEnumKeyA

gdi32

CreateSolidBrush
SetBkColor
SetTextColor
DeleteObject
GetDeviceCaps

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12.3MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

995387b4581fe41b6f4866c97fa7599b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

comctl32

version

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 25KB

.rsrc Size: 12.3MB - Virtual size: 12.3MB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 25KB

.rsrc
Size: 12.3MB - Virtual size: 12.3MB