6f51769dbb29d2ec20d1d4bfe631bd25

General

Target

6f51769dbb29d2ec20d1d4bfe631bd25
Size

323KB
MD5

6f51769dbb29d2ec20d1d4bfe631bd25
SHA1

b2285927a809c4913db98d4ce9db51c46e953945
SHA256

16a3e505ffb2cdfba543a8da3237c217aae78364e6ee88d2b1c40c9db1bd2e2b
SHA512

b79ac72049f2dea61eaa22241abdb967f975e7bbb48bda288b2353c256edc689b4517589e0d14982e02912cfccce4486f1e2c07ef2647babe7edeab33d6c2709
SSDEEP

6144:ZYh9zr64UFGbjgfm8fq/uX45TNCYzGUu45cO0HTAuVN95FmJu5r:67hI59cZFil

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f51769dbb29d2ec20d1d4bfe631bd25

Files

6f51769dbb29d2ec20d1d4bfe631bd25
.exe windows:4 windows x86 arch:x86

dcc506e9969c2458afab0853403c26e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateToolhelp32Snapshot
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetDriveTypeA
GetEnvironmentVariableA
GetExitCodeProcess
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
CreateDirectoryA
GetVolumeInformationA
LoadResource
CopyFileA
MoveFileA
OpenProcess
Process32First
Process32Next
SetFileAttributesA
SetPriorityClass
SetThreadPriority
SizeofResource
Sleep
TerminateProcess
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
CloseHandle
GetSystemDirectoryA
LockResource

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteExA
SHChangeNotify
ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 314KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dcc506e9969c2458afab0853403c26e9

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 314KB - Virtual size: 378KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 314KB - Virtual size: 378KB