06acfe6fbe9b9913b33da423f3c8bc6a

General

Target

06acfe6fbe9b9913b33da423f3c8bc6a
Size

26KB
MD5

06acfe6fbe9b9913b33da423f3c8bc6a
SHA1

f92444967590968acee39e53ab0e829e9b7a5a90
SHA256

381781fb02d694d488c27e998855ac4aa2f6569ac8ef053accd69e9b86313683
SHA512

eb1576817e359eaf8e7112ec9324c39eaf850c252a197a7bb39b22d1e723e6e51bf6867b4e78d4dd815c9f66c1da013164c58e5bd3afb1ab88f10a003e51a7b3
SSDEEP

384:P1aRJA0ktg0/ZWw14KyXV3k8ukVSYJXKgr/r9zkH1INn0sOHK/krhBk:PP0oDm5/PIYtDrrZkVItFOLb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06acfe6fbe9b9913b33da423f3c8bc6a

Files

06acfe6fbe9b9913b33da423f3c8bc6a
.exe windows:5 windows x86 arch:x86

65017da09895d4d435ca6e2dc8548f87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyW
RegOpenKeyA
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerA

kernel32

GetProcAddress
GetModuleHandleW
lstrcatW
lstrlenW
GetLastError
HeapAlloc
GetProcessHeap
HeapFree
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceW
CloseHandle
DeviceIoControl
GetFileSize
CreateFileW
GetDiskFreeSpaceW
WriteFile
SetFilePointer
ExitProcess
CreateProcessW
GetEnvironmentVariableW
GetShortPathNameW
lstrcpyW
GetCommandLineW
GetTickCount
ResumeThread
SetThreadContext
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
GetThreadContext
DeleteFileW
CreateFileA
lstrcmpA
GetVolumeInformationA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetVersionExW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65017da09895d4d435ca6e2dc8548f87

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 52B

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 52B

.rsrc
Size: 18KB - Virtual size: 17KB