63f5bc35e7bf6a3ec70b734325e4a1f8

General

Target

63f5bc35e7bf6a3ec70b734325e4a1f8
Size

68KB
MD5

63f5bc35e7bf6a3ec70b734325e4a1f8
SHA1

9d1d540e0014b11d9c5ddad406aa0fd741259667
SHA256

3ab6b432bcc4a8cd0a17e8a6f7bd5834e204c9174e4d5bbd6ad224884a525b8a
SHA512

0a9db25cc4d8e139ab826cefa36bcf1494c2696af98a48c4d076aeae4abd98ebda215f4a11f12c0891e8add6bd1ffe82d2f697f3dc0c1bc626ad844f73065be6
SSDEEP

768:OTp0iSVtncYNaGmtk8wU1wgYgbqsZA2wnqP3vjhgJhd6iB9b79cYhFkF7oQo9s2g:JNi+GugYgbnW2hgd9c2FCLoy2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63f5bc35e7bf6a3ec70b734325e4a1f8

Files

63f5bc35e7bf6a3ec70b734325e4a1f8
.exe windows:4 windows x86 arch:x86

696d7996c66b3f90ff626a28cf6f4519

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
InterlockedDecrement
Sleep
InterlockedIncrement
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA

shell32

ShellExecuteA

ole32

OleRun
CoInitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
GetErrorInfo

urlmon

URLDownloadToFileA

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

696d7996c66b3f90ff626a28cf6f4519

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

urlmon

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 18KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 18KB