6ee202f8b9cb09326e963ed7c059085c

Sharing

Copy URL Twitter E-mail

General

Target

6ee202f8b9cb09326e963ed7c059085c
Size

56KB
MD5

6ee202f8b9cb09326e963ed7c059085c
SHA1

be3db1f12dabad3809bf0493a5c2db61a0b91131
SHA256

8631eafee09c7012aefccbb6d59b72a8d1c70de44231838cedfd190a8e1c00b7
SHA512

4eb160e85665c5212128ce0069689a8cb740ae752f35cdf38de471f8b8fd0ceb6d21f048ed875afee4f450ecaeed14ac737fb94d9ae4ab3ab43729e7be970eb4
SSDEEP

768:NIpaCDznMLZx5oTFk14vHNw3Qptqv/4eZRNo46BGt60X3:mACHBk1Uw3jZfj68th3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ee202f8b9cb09326e963ed7c059085c

Files

6ee202f8b9cb09326e963ed7c059085c
.exe windows:4 windows x86 arch:x86

aa25bf3da3debe793fa0e595f81fd044

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerifyVersionInfoA
VerSetConditionMask
WaitForSingleObject
CreateMutexA
FormatMessageA
GetLastError
OpenProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
HeapSize
LoadLibraryA
ReleaseMutex
InitializeCriticalSection
GetLocaleInfoA
Sleep
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
CloseHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile

user32

FindWindowA
GetWindowThreadProcessId
PostMessageA
wsprintfA
GetParent
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
SetTimer
DefWindowProcA
GetClientRect
FillRect
EndPaint
PostQuitMessage
DestroyWindow
KillTimer
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
BeginPaint

gdi32

GetStockObject

shell32

SHGetFolderPathAndSubDirA
SHGetFolderPathA
ShellExecuteExA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa25bf3da3debe793fa0e595f81fd044

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 2KB