06fc4b047eb1616bd53339b8798d498c

General

Target

06fc4b047eb1616bd53339b8798d498c
Size

14KB
MD5

06fc4b047eb1616bd53339b8798d498c
SHA1

7ef280de4aa2a9fd7a90f00e4cba654f251ddb6d
SHA256

afbdf5eb3ac9b8d5248d3ce98e88c70400f734c90a3ca3de1d583920beb1d4e8
SHA512

c24dc8da24cd2fec69144c11ccc1573705e68c4d8110f519f0438c5ca4eb2f87e19cccac2b1e1b52e86ffd5e57dbc7a6f31123ec254aca0eea4f0df1c1834620
SSDEEP

192:BPba6ThHEwVssKrE/rrG6tirJ5VqIT7Ln50NDu8Big6LOF3:RbDEwVssKrArC6gdJku8YDLy3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06fc4b047eb1616bd53339b8798d498c

Files

06fc4b047eb1616bd53339b8798d498c
.dll windows:4 windows x86 arch:x86

8f0f84f67131520c60fa60820fe65571

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualProtectEx
ReadProcessMemory
GlobalFree
GlobalLock
CreateFileA
GetCurrentProcess
GetCurrentThread
GetCurrentProcessId
OutputDebugStringA
CreateEventA
SetThreadPriority
CreateThread
FreeLibrary
GetPrivateProfileStringA
DeleteFileA
GetModuleHandleA
GetProcAddress
OpenProcess
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
GlobalAlloc
VirtualAlloc

user32

UnhookWindowsHookEx
CallNextHookEx
AnyPopup
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DrawIcon
GetDesktopWindow
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA
SetWindowsHookExA

gdi32

ArcTo
BitBlt
DeleteObject
Arc

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f0f84f67131520c60fa60820fe65571

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 11KB - Virtual size: 11KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1024B - Virtual size: 874B

.text
Size: 11KB - Virtual size: 11KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1024B - Virtual size: 874B