2660b565e3a3d877f679babf4458280b

General

Target

2660b565e3a3d877f679babf4458280b
Size

48KB
MD5

2660b565e3a3d877f679babf4458280b
SHA1

0785bc612744867237be918a9f8f4208c668db16
SHA256

71deb1ac50741670f954e3f3e98938e351b64176791f854806c2ad2792653dac
SHA512

0264b8fcb7d24603441d87fb3768f3f4e4852af985dc686332690c19986e6a44db6705f7e2c0f6e639fcee28d98aaa85c67b5fb0e2562190d92820250d71f496
SSDEEP

768:7JToSJxKrAw0cWtyNFJMQpibIGc9x+pH2og:5oWoFJMctuMog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2660b565e3a3d877f679babf4458280b

Files

2660b565e3a3d877f679babf4458280b
.exe windows:4 windows x86 arch:x86

fa27239d2fdc36b02b312085d0a98991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
Sleep
GetModuleFileNameA
CreateEventA
GetLastError
CopyFileA
GetWindowsDirectoryA
GetPrivateProfileStringA
DeleteFileA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetStringTypeW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

shlwapi

PathFileExistsA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fa27239d2fdc36b02b312085d0a98991

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

wininet

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 8KB