06750148e072deb6fdb6d945205c53ff

Sharing

Copy URL Twitter E-mail

General

Target

06750148e072deb6fdb6d945205c53ff
Size

100KB
MD5

06750148e072deb6fdb6d945205c53ff
SHA1

e5638a25d3e75c0b4c792d8859caf7f1da02082b
SHA256

7953172db5edd9edffd39323a235aa9b43e1750257ae9cfcaaae988fcc35b2f7
SHA512

fbc475e3b9e4c88d9b97e6deda9ef06989ab38808d789739514bf25c55a0a3fe73d1668d432dd35fd7f4f46bfb86739fb6f6745156b48bcd475c4089cd9392b8
SSDEEP

1536:jSVNgmOg+VTRnZsYa+gu5FWCfUpHQUXT8onIJYlliTD:ONgJha01fgQXYlli

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06750148e072deb6fdb6d945205c53ff

Files

06750148e072deb6fdb6d945205c53ff
.exe windows:4 windows x86 arch:x86

5157ae996889623ac19f007c18f338e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv
closesocket
socket
WSAAsyncSelect
htons
connect
WSACleanup
WSAStartup
send
WSAGetLastError
gethostname
gethostbyname
inet_ntoa

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetGetConnectedState

kernel32

LoadLibraryA
GetCurrentProcess
OpenFileMappingA
MapViewOfFile
GetLastError
CreateFileMappingA
UnmapViewOfFile
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
Sleep
Beep
GetModuleHandleA
GetFileSize
HeapFree
HeapReAlloc
HeapAlloc
lstrcmpA
Process32Next
GetPriorityClass
OpenProcess
Process32First
TerminateProcess
WaitForSingleObject
ReadFile
PeekNamedPipe
CreateProcessA
CreatePipe
DeleteFileA
SetEndOfFile
SetFilePointer
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
HeapDestroy
HeapCreate
GetProcAddress
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
GetComputerNameA
GetSystemDefaultLCID
TerminateThread
CreateThread
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
GetDriveTypeA
GetLogicalDriveStringsA
GetLogicalDrives
SetComputerNameA
GetLocalTime
GetTickCount
SetLocalTime
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetEnvironmentStringsW
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
GetCommandLineA
GetStartupInfoA
MoveFileA
ExitProcess
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetCurrentProcessId
FreeLibrary
CreateToolhelp32Snapshot
Module32First
Module32Next
CloseHandle
VirtualFree
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
VirtualAlloc
VirtualQuery
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapSize
SetStdHandle
FlushFileBuffers
RtlUnwind
InterlockedExchange
CompareStringA
CompareStringW
GetVolumeInformationA
SetEnvironmentVariableA

user32

LoadIconA
RegisterClassA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
UpdateWindow
ExitWindowsEx
GetCursorPos
GetDesktopWindow
GetClientRect
SetRect
DrawTextA
PostQuitMessage
EnumDisplaySettingsA
DefWindowProcA
MessageBoxA
SendMessageA
SetTimer
GetClassNameA
EnumWindows
wsprintfA
mouse_event
SetCursorPos
MapVirtualKeyA
keybd_event
PostMessageA
GetDC
ReleaseDC
LoadStringA
GetWindowThreadProcessId

gdi32

DeleteDC
GetDIBits
RealizePalette
SelectPalette
GetObjectA
GetStockObject
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateDCA
CreateCompatibleDC

advapi32

RegCloseKey
GetUserNameA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegSetValueExA

shell32

ShellExecuteA

shlwapi

SHCopyKeyA
SHDeleteKeyA
SHDeleteValueA

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5157ae996889623ac19f007c18f338e4

Headers

File Characteristics

Imports

ws2_32

wininet

kernel32

user32

gdi32

advapi32

shell32

shlwapi

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 20KB - Virtual size: 40KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 20KB - Virtual size: 40KB

.rsrc
Size: 8KB - Virtual size: 7KB