ff6bc22c7201c74b9f7593284aebe64c

General

Target

ff6bc22c7201c74b9f7593284aebe64c
Size

544KB
MD5

ff6bc22c7201c74b9f7593284aebe64c
SHA1

136ee431553eebcce61c31ffc94b0a09324ec017
SHA256

e82f00787b403f96b93070a5453534c14a6dc4909405917a3e11b0133e373bed
SHA512

fa7b0628764a867dfce4ce1d61ce3f589e4e3d11f9108df50f8fb1d82dacd90c1d0fabb4596fcb00d8faab6b0a0f2b0899310cb8dcac12fbfd32e30e57aa7c63
SSDEEP

12288:FtSqSA2m6iA1fIMTnaAqfp7n2lUSgo1aMuHXaJ5W0FiQ2b1:Fj2PiIDan2lUOagPBF3a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff6bc22c7201c74b9f7593284aebe64c

Files

ff6bc22c7201c74b9f7593284aebe64c
.exe windows:4 windows x86 arch:x86

2e92e0bc2861e262e0109a201537f1bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsIconic
SetWindowPos
GetParent
GetClientRect
SetTimer
LoadCursorA
SetCursor
DestroyWindow

kernel32

TerminateProcess
GetVersion
ExitProcess
CreateFileA
GetTickCount
GetFileType
Sleep
VirtualFree
CreateFileW
InitializeCriticalSection
RemoveDirectoryA
LocalFree
GetStringTypeW
HeapReAlloc
GetACP
CloseHandle
GetCurrentProcess
CreateThread
GetProcAddress
MultiByteToWideChar
SetErrorMode
DeleteFileA
GetStartupInfoA
GetFileAttributesW
LoadLibraryA
GlobalUnlock
GetEnvironmentStringsW
TlsAlloc
HeapAlloc
GetOEMCP
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
VirtualAlloc
GetProcessHeap
GetModuleHandleA
GetCommandLineA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetCurrentThreadId
TlsSetValue
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetStringTypeA
LCMapStringA
LCMapStringW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e92e0bc2861e262e0109a201537f1bc

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 488KB - Virtual size: 487KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 488KB - Virtual size: 487KB

.rsrc
Size: 8KB - Virtual size: 4KB