6e608885cc892eac7dc1c865e7bd6bd5

Sharing

Copy URL

Twitter E-mail

General

Target

6e608885cc892eac7dc1c865e7bd6bd5
Size

303KB
MD5

6e608885cc892eac7dc1c865e7bd6bd5
SHA1

bd29e9bebb9b10ed6082791c6836582344d0a464
SHA256

75f75f0449d5f42bd60d5c7a56a8ca89ff19a5d4494c95ca3fe9a11ec38438b2
SHA512

b347d4ca58e1dfcb4bdb2d764704984f877edc4fb504458e641465b5506f097db78fa8418953ec6e1baed37a1a182a405c092be85b898c19aa8183a59bd0e799
SSDEEP

6144:I6MMYx5EOhcoh//oct0pf1XB9FVTqmCYkk3jmsy6LBAOieSqsR:I3bhcoRAct0prFTHpTisHr0qc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e608885cc892eac7dc1c865e7bd6bd5

Files

6e608885cc892eac7dc1c865e7bd6bd5
.dll windows:4 windows x86 arch:x86

a54565fd03aff54df94deececbe2273e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

InflateRect
ShowWindow
GetMenu
FillRect
GetFocus
OemToCharA
SetWindowLongW
DrawEdge
MapVirtualKeyA
CreatePopupMenu
GetCursor
UnregisterClassA
SetClipboardData
GetDlgItem
IsWindowUnicode
EnableMenuItem
IsWindow
SetFocus
GetActiveWindow
CloseClipboard
InsertMenuItemA
PostMessageA
GetScrollRange
SendMessageA
GetSystemMetrics
GetKeyboardState
DefFrameProcA
EnableScrollBar
DestroyWindow
SetCursor
MessageBeep
GetCursorPos
ReleaseDC
DrawFrameControl
GetParent
PeekMessageA
GetCapture
GetLastActivePopup
GetDC
GetForegroundWindow
SetTimer
SetWindowTextA
TrackPopupMenu
PtInRect
IsWindowEnabled
GetClassInfoA
GetClipboardData
SetForegroundWindow
GetSubMenu
CharToOemA
IsIconic
GetKeyState
EmptyClipboard
UnhookWindowsHookEx
RemoveMenu
SetClassLongA
TranslateMessage
GetDCEx
DestroyMenu
FindWindowA
GetMessagePos
DefMDIChildProcA
KillTimer
GetKeyboardLayoutList
LoadBitmapA
CreateWindowExA
SetScrollInfo
GetMenuItemID
CharNextA
ScreenToClient
SetScrollRange

gdi32

GetDIBColorTable
CreatePalette

kernel32

GetCommandLineW
VirtualAllocEx
GlobalAlloc
lstrlenA
lstrlenW
LoadLibraryA
GetCommandLineA
ExitProcess
ExitThread
GetACP
GetProcAddress
IsBadReadPtr
GetModuleHandleA

comdlg32

FindTextA

shlwapi

PathIsContentTypeA
SHDeleteValueA
SHQueryInfoKeyA

oleaut32

SafeArrayPtrOfIndex

ole32

CoTaskMemFree
StgCreateDocfileOnILockBytes
CoCreateFreeThreadedMarshaler
CLSIDFromProgID
CoGetContextToken
StgOpenStorage

shell32

Shell_NotifyIconA
SHGetSpecialFolderLocation

advapi32

RegDeleteValueA
RegLoadKeyA

Sections

CODE
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC2
Size: 1KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC8
Size: 1024B - Virtual size: 943B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC4
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a54565fd03aff54df94deececbe2273e

Headers

File Characteristics

Imports

user32

gdi32

kernel32

comdlg32

shlwapi

oleaut32

ole32

shell32

advapi32

Sections

CODE Size: 101KB - Virtual size: 100KB

.data Size: 184KB - Virtual size: 184KB

.RSRC1 Size: 3KB - Virtual size: 3KB

.RSRC6 Size: 1024B - Virtual size: 582B

.RSRC2 Size: 1KB - Virtual size: 49KB

.RSRC8 Size: 1024B - Virtual size: 943B

.RSRC5 Size: 1024B - Virtual size: 769B

.RSRC4 Size: 512B - Virtual size: 356B

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 596B

CODE
Size: 101KB - Virtual size: 100KB

.data
Size: 184KB - Virtual size: 184KB

.RSRC1
Size: 3KB - Virtual size: 3KB

.RSRC6
Size: 1024B - Virtual size: 582B

.RSRC2
Size: 1KB - Virtual size: 49KB

.RSRC8
Size: 1024B - Virtual size: 943B

.RSRC5
Size: 1024B - Virtual size: 769B

.RSRC4
Size: 512B - Virtual size: 356B

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 596B