637b6d04a5ea08bdee6665692dd666e0

General

Target

637b6d04a5ea08bdee6665692dd666e0
Size

115KB
MD5

637b6d04a5ea08bdee6665692dd666e0
SHA1

82578a50cc0211201216758160f57ab09030a0c2
SHA256

e3ffddf4439095dac40affa573351f0020eeff17e596a074e9041d193342e6f2
SHA512

442b150c8b35c869caaa2cfba74739123535fb839ff254e2640a940893120a9ef5ac342fe17648105fddba4a0f1a723c9bc7b547a5f6a5360e0bf57bc629ed5b
SSDEEP

1536:4H2AUhmobvHlXllShppCOBVbPl8GLyDDLUnqjhP0NV/9Z+oGt4:mmDHlIpCOBVzl8GWkEMNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
637b6d04a5ea08bdee6665692dd666e0

Files

637b6d04a5ea08bdee6665692dd666e0
.exe windows:5 windows x86 arch:x86

6083d7d3731d195bf48e07b3a5d4c6a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetTickCount
GetWindowsDirectoryA
GetThreadLocale
lstrlenW
GetVersion
GetDriveTypeA
GetProcessHeap
lstrcmpiW
IsDebuggerPresent
DeleteFileA
GetCurrentProcessId
DeleteFileW
GetCommandLineW
GetCurrentThread
GetModuleHandleA
GetCurrentThreadId
lstrcmpA
GetModuleHandleW
QueryPerformanceCounter
RemoveDirectoryA
GetStartupInfoA
GetCommandLineA
GetCurrentProcess
SetCurrentDirectoryA
lstrlenA
MulDiv
GetACP
GlobalFindAtomW
GetUserDefaultLangID
lstrcmpiA
GetConsoleOutputCP
CopyFileA
GlobalFindAtomA
RemoveDirectoryW
VirtualAlloc
VirtualFree

gdi32

GetDeviceCaps
CreateSolidBrush
DeleteDC
LineTo
RestoreDC
RectVisible
DeleteObject
CreateCompatibleDC
SaveDC
SetStretchBltMode
SelectPalette
GetStockObject
CreateFontIndirectA
CreatePen
GetObjectA
SetMapMode
SetTextAlign
SetTextColor
PatBlt
CreatePalette
GetClipBox
GetPixel
SelectObject
GetTextMetricsA
SetPixel

user32

GetSystemMetrics
GetParent
CharNextA
TranslateMessage
GetDesktopWindow

glu32

gluQuadricCallback

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6083d7d3731d195bf48e07b3a5d4c6a5

Headers

File Characteristics

Imports

kernel32

gdi32

user32

glu32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 13KB - Virtual size: 12KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 13KB - Virtual size: 12KB