6662645a30026e664c7ad5f202d9b122

Sharing

Copy URL

Twitter E-mail

General

Target

6662645a30026e664c7ad5f202d9b122
Size

2.9MB
MD5

6662645a30026e664c7ad5f202d9b122
SHA1

028c20a316f0fd41d2284ee4291d5e99af365efc
SHA256

f5816fd0b96b3b9620d675b5b3d556bccc2b8fe1bba926501b73541a320e0a1e
SHA512

9350a2e46bbd9bfe4523c57fb95f385b4d1269ac0ab629ce1b127a5c6e3f09d31c7ca2b5cb9ec16814205ab93e82f120aabc68f4fc686e80df50755006fa13fd
SSDEEP

49152:8nWdK0vtKXftpbhC9EWLd7A7Fq0V2PJk3ku2wUQV99PmPxxJE1JTw0ez:8WdK0IXftpbhC3tAY0OGs2PmPP6fTw0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6662645a30026e664c7ad5f202d9b122

Files

6662645a30026e664c7ad5f202d9b122
.exe windows:5 windows x64 arch:x64

7f51f377672d2b4247b5427fcda6b46b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA

user32

GetCursor

advapi32

RegOpenKeyExA

msvfw32

ICLocate

msvcp140

?_Throw_C_error@std@@YAXH@Z

ws2_32

listen

winmm

timeKillEvent

avifil32

AVISaveVW

dhnetsdk

ord120

api-ms-win-crt-string-l1-1-0

isxdigit

shell32

PathMakeUniqueName

msacm32

acmStreamConvert

api-ms-win-crt-time-l1-1-0

_gmtime64

seamax

SME_SearchForModules

api-ms-win-crt-filesystem-l1-1-0

_mkdir

api-ms-win-crt-convert-l1-1-0

_wtol

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-utility-l1-1-0

rand

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

malloc

mswsock

WSARecvEx

shlwapi

UrlEscapeW

version

VerQueryValueW

iphlpapi

GetIpAddrTable

comdlg32

GetSaveFileNameW

api-ms-win-crt-math-l1-1-0

floor

wmvcore

WMCreateWriterPushSink

oleaut32

SafeArrayAccessData

secur32

FreeCredentialsHandle

rpcrt4

RpcStringFreeW

vcruntime140

__CxxFrameHandler3

crypt32

CryptUnprotectData

dsound

ord3

uxtheme

SetWindowTheme

bcrypt

BCryptOpenAlgorithmProvider

msimg32

GradientFill

comctl32

ImageList_EndDrag

seaio32

ord1

gdiplus

GdipCreateFontFamilyFromName

ddraw

DirectDrawCreate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf_p

tapi32

lineMakeCallW

api-ms-win-crt-runtime-l1-1-0

_c_exit

mpr

WNetAddConnection2W

gdi32

GetTextExtentPoint32W

mfc140u

ord359

avicap32

capGetDriverDescriptionW

ole32

CoCreateGuid

wininet

InternetGetLastResponseInfoW

Sections

Size: - Virtual size: 22.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 9.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 505KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.9MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f51f377672d2b4247b5427fcda6b46b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvfw32

msvcp140

ws2_32

winmm

avifil32

dhnetsdk

api-ms-win-crt-string-l1-1-0

shell32

msacm32

api-ms-win-crt-time-l1-1-0

seamax

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

vcruntime140_1

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

mswsock

shlwapi

version

iphlpapi

comdlg32

api-ms-win-crt-math-l1-1-0

wmvcore

oleaut32

secur32

rpcrt4

vcruntime140

crypt32

dsound

uxtheme

bcrypt

msimg32

comctl32

seaio32

gdiplus

ddraw

api-ms-win-crt-stdio-l1-1-0

tapi32

api-ms-win-crt-runtime-l1-1-0

mpr

gdi32

mfc140u

avicap32

ole32

wininet

Sections

Size: - Virtual size: 22.7MB

Size: - Virtual size: 508KB

Size: - Virtual size: 9.7MB

Size: - Virtual size: 9.4MB

Size: - Virtual size: 505KB

Size: - Virtual size: 24B

Size: - Virtual size: 20KB

Size: - Virtual size: 16KB

Size: - Virtual size: 2KB

Size: - Virtual size: 1KB

Size: - Virtual size: 136KB

Size: - Virtual size: 18KB

Size: - Virtual size: 101KB

Size: - Virtual size: 12KB

Size: - Virtual size: 1KB

Size: - Virtual size: 1KB

Size: - Virtual size: 7KB

Size: - Virtual size: 126KB

Size: - Virtual size: 10KB

.rsrc
Size: 2.9MB - Virtual size: 10.4MB