206d0fd18d40d8adcfc18e974493dfb6

General

Target

206d0fd18d40d8adcfc18e974493dfb6
Size

40KB
MD5

206d0fd18d40d8adcfc18e974493dfb6
SHA1

8489c0b44387cc770a72afe82d9a4ebcad664e37
SHA256

e66b7dbb4b9e5d25d9e3f737071b67d10478d30f4e29bf060af038a6dae6da47
SHA512

06a2dc87dabe7f3c35f9f6e902854ca360fcbf7112312acfe0df53efebdce820c7b42a3ab3f85aca585331dc0de8358d5cbc253bb89fedd08de2df3d109ee141
SSDEEP

384:8k8gcjlj83kpFcsB7rfVpE8mtzjlYR0bhFYIc0Dfj8kHbNCllyf35/vvQjlY+B:8Rjt8UnTB308+jtgIcUfj8k5gI5X4lT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
206d0fd18d40d8adcfc18e974493dfb6

Files

206d0fd18d40d8adcfc18e974493dfb6
.exe windows:4 windows x86 arch:x86

66ce16f25dd5af3153f035e9df55fd5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LocalFree
WriteFile
GetStdHandle
lstrlenW
FormatMessageW
GetLastError
ReadFile
CreateProcessW
SetEnvironmentVariableW
GetConsoleOutputCP
GetFullPathNameW
GetCommandLineW
CloseHandle
DuplicateHandle
GetCurrentProcess
CreatePipe
GetModuleHandleA
GetVersionExA
GetProcAddress
TerminateProcess
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
HeapAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
LoadLibraryA
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
GetLocaleInfoA
GetCPInfo
GetStringTypeA
GetStringTypeW
HeapSize
FlushFileBuffers
GetACP
GetOEMCP

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

66ce16f25dd5af3153f035e9df55fd5d

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB