6ea285b7008d1f9089d89d9a0ca3acd9

Sharing

Copy URL Twitter E-mail

General

Target

6ea285b7008d1f9089d89d9a0ca3acd9
Size

100KB
MD5

6ea285b7008d1f9089d89d9a0ca3acd9
SHA1

d6c9e4e748962fdd9004c2e6124e64fd62c3c6f8
SHA256

e7222ba75d8bd39917b8dfeed10e22faebc4f080b53633f781853855265d215a
SHA512

ed46d5be886a5db40474ce968f144a6df6ce568115664b178d8c1c394ec2dcc4f017380dc4a5d073a28fc2e0253550706bfb9b7d9a0a02e6e03c4dec6b0fd303
SSDEEP

3072:NGfOnwK0QBL45agGd59A/O6+T8+OoOaZPv:SOne6yP059bN3Hv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ea285b7008d1f9089d89d9a0ca3acd9

Files

6ea285b7008d1f9089d89d9a0ca3acd9
.exe windows:4 windows x86 arch:x86

fe60816a900c50d7348dfa572cd569e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
GlobalFlags
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
MoveFileA
GetFileAttributesA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
CreateThread
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
HeapSize
HeapReAlloc
TerminateProcess
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalFree
GetModuleHandleA
GetCommandLineA
LocalAlloc
GetTempPathA
DeleteFileA
LoadLibraryA
FreeLibrary
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetProcAddress
SetLastError
InterlockedDecrement
CloseHandle
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
HeapFree
Sleep
GetModuleFileNameA
GetLastError
HeapAlloc
WinExec
OutputDebugStringA
GetCurrentThreadId
GetLocalTime
ExitProcess

advapi32

DeregisterEventSource
OpenSCManagerA
OpenServiceA
RegOpenKeyA
RegQueryValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
CloseServiceHandle
ReportEventA
RegisterEventSourceA
StartServiceA
RegCloseKey
RegSetValueExA
RegCreateKeyA
CreateServiceA
DeleteService
ControlService

comctl32

ord17

wininet

InternetCloseHandle
InternetGetConnectedState
InternetOpenA
InternetConnectA
HttpQueryInfoA
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetSetFilePointer

user32

GetCapture
MessageBoxA
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
LoadStringA
UnhookWindowsHookEx
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetMenuState
LoadBitmapA
DispatchMessageA
CheckMenuItem

gdi32

RectVisible
GetClipBox
CreateBitmap
SetBkColor
GetObjectA
SetTextColor
GetDeviceCaps
DeleteObject
DeleteDC
Escape
ExtTextOutA
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
TextOutA
PtVisible

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fe60816a900c50d7348dfa572cd569e0

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

wininet

user32

gdi32

winspool.drv

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 23KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 23KB