06203d923dd3c1d2ae43ea188dc83db3

General

Target

06203d923dd3c1d2ae43ea188dc83db3
Size

184KB
MD5

06203d923dd3c1d2ae43ea188dc83db3
SHA1

4fc4cb4254a72dabe739db5b6c7655245c1da02f
SHA256

645adbc7c1be4c997f30f63c92f84db084ab90c57df83ceb7d70e2ee0673fdcc
SHA512

c4d49616a0ce48dc6aaf5cdb277c4d550f13994da3c0e2ac841ce25622e234d3ba2704d22ccd69dfcca736af643fbcf42e2d2bfcb909c30faa0fbd79c926cc73
SSDEEP

3072:DLEQzz7kdKF7FX66Ef6VKEDLNSAvRwBrN6ggjZ5LAqRWBxz0W3IYsxFsH:8QQdKVh66oUKE4XrNngjZ5Re3IvxFsH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06203d923dd3c1d2ae43ea188dc83db3

Files

06203d923dd3c1d2ae43ea188dc83db3
.exe windows:4 windows x86 arch:x86

6dcecede45dd10be526490adc73a9c44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

StrCmpNIA
StrStrA

shell32

SHGetFolderPathW

kernel32

WideCharToMultiByte
CreateFileW
GetSystemInfo
QueryPerformanceCounter
Sleep
MultiByteToWideChar
AddAtomA
LoadLibraryA
FindResourceA
CreateSemaphoreA
GetCurrentThreadId
IsBadWritePtr
GetCurrentThread
SetThreadPriority
InterlockedIncrement
GetProcessHeap
FreeLibrary
GetLastError
GetCurrentProcessId
LockResource
GetTickCount
LeaveCriticalSection
LoadLibraryW
lstrlenA
VirtualFree
ReleaseMutex
EnumResourceTypesA
LoadResource
ReleaseSemaphore
CreateMutexA
GetExitCodeThread
GetModuleFileNameW
GetPrivateProfileStructA
TerminateThread
GetSystemTime
WaitForMultipleObjects
GetThreadPriority
ResetEvent
DisableThreadLibraryCalls
VirtualAlloc
IsBadReadPtr
GetModuleFileNameA
EnterCriticalSection
HeapFree
GetProcAddress
InterlockedDecrement
GlobalAlloc
ExitProcess

Sections

.text
Size: 93KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dcecede45dd10be526490adc73a9c44

Headers

File Characteristics

Imports

setupapi

iphlpapi

newdev

shlwapi

shell32

kernel32

Sections

.text Size: 93KB - Virtual size: 236KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 88KB - Virtual size: 87KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 236KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 88KB - Virtual size: 87KB

.rsrc
Size: 512B - Virtual size: 4KB