2c68e47bc1418b1e2823a5b3a9bb6389

Sharing

Copy URL Twitter E-mail

General

Target

2c68e47bc1418b1e2823a5b3a9bb6389
Size

288KB
MD5

2c68e47bc1418b1e2823a5b3a9bb6389
SHA1

5ade200dec5fdc5ca3cbc793984a22ec63cfa9fa
SHA256

b7f293b6bbfc935974d8f4d7e318099f6c3f505eb4d4d64d2fa094966d5397e5
SHA512

3676a8d0bc836609291fd790df597f70a75eea2de85048dccddeffdd021eecedc5e1e568551bf4caae7a6c5b99e58dfd3d34b1a1b97054dc1fef94783d600fa7
SSDEEP

6144:sh+LznGR1QV5J8svr1cnsBjTGDJgqOPx+AOkVE1x:sKW1QV5J8svr1cklqEx+n1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c68e47bc1418b1e2823a5b3a9bb6389

Files

2c68e47bc1418b1e2823a5b3a9bb6389
.exe windows:6 windows x86 arch:x86

855085be59e879a54d10253b20d6932a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
LoadLibraryW
CreateThread
HeapAlloc
GetProcAddress
ExitProcess
GetProcessHeap
GetConsoleWindow
WriteConsoleW
GetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
HeapSize
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
WriteFile
GetModuleFileNameW
GetModuleHandleExW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapFree
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
GetCurrentDirectoryW
GetFullPathNameW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
ReadFile
GetTimeZoneInformation
SetEndOfFile

user32

GetMessageW
DefWindowProcW
MessageBoxW
CreateWindowExW
RegisterClassExW
ShowWindow
GetWindowLongW
TranslateMessage
LoadIconW
LoadCursorW
PostQuitMessage
UpdateWindow
BeginPaint
EndPaint
DispatchMessageW

gdi32

TextOutW

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Programa
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

855085be59e879a54d10253b20d6932a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 201KB - Virtual size: 200KB

.rdata Size: 71KB - Virtual size: 70KB

.data Size: 4KB - Virtual size: 7KB

Programa Size: 512B - Virtual size: 5B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 201KB - Virtual size: 200KB

.rdata
Size: 71KB - Virtual size: 70KB

.data
Size: 4KB - Virtual size: 7KB

Programa
Size: 512B - Virtual size: 5B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 10KB - Virtual size: 10KB