63571175878cd819169820c34a10b8ed

General

Target

63571175878cd819169820c34a10b8ed
Size

26KB
MD5

63571175878cd819169820c34a10b8ed
SHA1

4654b3c51f4855af700a49838c47f0caa50cb865
SHA256

2a15bdf995ee04a1e437df95f15d514829af2f1a228333d9cf0c6dde3520a75e
SHA512

be61adc596badaad3123c5006a67c7408f68585d44195394618837727dbf80fe8a29345600caf8260be12758182f51c2535361fca173e351410ab0f55cc132cc
SSDEEP

384:rP9ZdgRuTn74BA8Bmlc9lSoPNTsJY7yy21Rp8RirlobuCQPWN9L5:rUq7Z8nkUy1Rp8ROloz3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63571175878cd819169820c34a10b8ed

Files

63571175878cd819169820c34a10b8ed
.exe windows:4 windows x86 arch:x86

cc877af1f2f4c887682590e3f95bfc0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
WriteFile
DeleteFileA
ReadFile
CloseHandle
GetFileSize
CreateFileA
CreateThread
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetACP
GetCPInfo
RtlUnwind
CopyFileA
CreateDirectoryA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
Sleep
WinExec
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetStringTypeW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
lstrcpynA
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc

user32

wsprintfA
ShowWindow
UpdateWindow
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
GetDesktopWindow
CreateDialogParamA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA

wsock32

sendto
socket
WSAStartup
ioctlsocket
htons
connect
recvfrom

ole32

CoInitialize
CoCreateInstance

shell32

Shell_NotifyIconA

comctl32

InitCommonControlsEx

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc877af1f2f4c887682590e3f95bfc0d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wsock32

ole32

shell32

comctl32

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 240B

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 240B