6845bcc4b3425060080110ac5e5e327a

Sharing

Copy URL Twitter E-mail

General

Target

6845bcc4b3425060080110ac5e5e327a
Size

27KB
MD5

6845bcc4b3425060080110ac5e5e327a
SHA1

6a4018cceae02d85691ed6cfaf22e0408ee2aada
SHA256

290a9215500ca1f742f116f7403e2e1b14f561cea1f99ed58434f652f59eb028
SHA512

a7e3e449ebd34c7211262576d2b048f8a04eb41a042bf03078cdd70b78f7364a457c1435e5fd3bd4709c920561b2b461fe07828b3be2c0f9f71890e0ed58a83a
SSDEEP

384:MB2BN0SuEOv5/RMKjaGPkn9GeF7UXB4z+9lPWNdUpExrHmcR82sGspSkAx2:vBQv4K1Pk9DpOgmCRmc6Dn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6845bcc4b3425060080110ac5e5e327a

Files

6845bcc4b3425060080110ac5e5e327a
.exe windows:4 windows x86 arch:x86

73c674891f59e6261f4a89a0e1f60937

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
lstrcmpiA
WaitForSingleObject
lstrlen
GetProfileIntA
EnumResourceTypesW
WriteConsoleOutputCharacterW
MultiByteToWideChar
GetLocalTime
GetStdHandle
lstrcmpiW
ReadConsoleInputA
GetStartupInfoW
FindResourceA
GetModuleHandleW
HeapAlloc
VirtualFree
GetSystemPowerStatus
GetProcessHeap
GetConsoleCP
SetErrorMode
GetProcessWorkingSetSize
GetModuleHandleA
GetSystemDefaultLCID
GetProcAddress
GetThreadContext
lstrlenA
lstrcmpW
VirtualAlloc
DeleteFiber
CopyFileExW
GetLastError
MoveFileExW
CloseHandle
GetFileTime
GetCommandLineW
GetTickCount
HeapDestroy
GlobalSize
GetDiskFreeSpaceExW
GetProfileStringW
CreateDirectoryExW
LocalShrink
ExitProcess
lstrcpynW
FatalExit
FatalAppExitA
GetEnvironmentStringsW
lstrcmpA

msvcrt

isxdigit
_fpclass
_CIsin
_exit
fsetpos
_wcsupr
_mbslwr
_wrename
_heapwalk
_CIpow
strtol
_ismbbpunct
_setmbcp
fflush
_getsystime
_wsplitpath
_heapset
_wfindnext
strncpy
sqrt
swscanf
__iscsymf
iswascii
_atodbl
__doserrno
_wgetdcwd
_spawnvp
_wsearchenv
_wspawnve
_isnan
_vsnprintf
__p__wpgmptr
_strnset
_wsetlocale
_kbhit
_wspawnl
gmtime
_ismbbtrail
_spawnvpe

gdi32

EnumFontFamiliesA
GetObjectType
GdiGetBatchLimit
GetBoundsRect
FlattenPath
GetPixel
SelectClipPath
CreateEllipticRgnIndirect
SetArcDirection
GetTextMetricsA
Escape
EndPage
CancelDC
GetTransform
EnumFontsA
GetMiterLimit
SetLayout
GetTextExtentPointA
GetEnhMetaFileA
UpdateICMRegKeyW
SetWindowOrgEx
GetKerningPairsW
GetROP2
GetTextCharset
GetObjectA
DeleteObject
GetCharacterPlacementW
GetOutlineTextMetricsW
GetArcDirection
CreateMetaFileW
GetCurrentPositionEx
SetLayout
PatBlt
SetViewportExtEx
DeleteMetaFile

advapi32

GetFileSecurityA
ConvertSecurityDescriptorToAccessNamedW
GetServiceKeyNameW
SetSecurityInfo
GetNamedSecurityInfoA
QueryServiceConfigW
CryptGenRandom
RegRestoreKeyA
ChangeServiceConfigA
BuildImpersonateExplicitAccessWithNameA
GetSidSubAuthority
BuildImpersonateTrusteeA
QueryServiceConfigA
GetSecurityDescriptorControl
CryptVerifySignatureA
NotifyChangeEventLog
BuildImpersonateTrusteeW
RegCreateKeyExA

user32

CopyAcceleratorTableA
LoadMenuW
TranslateMDISysAccel
AlignRects
SendNotifyMessageA
RegisterHotKey
GetMessageW
IsCharUpperA
ChildWindowFromPointEx
EndDeferWindowPos
TileWindows
IMPSetIMEA
EnumThreadWindows
EndPaint
SetSystemCursor
GetClassNameW
CopyIcon
LoadCursorA
ShowCursor
LoadBitmapA
CharPrevW
IsWindowVisible
RemovePropW
RemovePropA
MoveWindow
FlashWindowEx
RegisterLogonProcess
GetMenuContextHelpId
CreateWindowStationA
SetRect
CharLowerBuffW
GetDlgItem
keybd_event
LoadStringA
CloseWindow
PeekMessageA
DefFrameProcW

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pjmq
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.deehi
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zpsnq
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73c674891f59e6261f4a89a0e1f60937

Headers

File Characteristics

Imports

kernel32

msvcrt

gdi32

advapi32

user32

Sections

.text Size: 15KB - Virtual size: 16KB

.pjmq Size: 4KB - Virtual size: 10KB

.deehi Size: 3KB - Virtual size: 9KB

.zpsnq Size: 3KB - Virtual size: 23KB

.reloc Size: 1024B - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 16KB

.pjmq
Size: 4KB - Virtual size: 10KB

.deehi
Size: 3KB - Virtual size: 9KB

.zpsnq
Size: 3KB - Virtual size: 23KB

.reloc
Size: 1024B - Virtual size: 1KB