6884ea22abd8a0b7b4063a86aad47718

Sharing

Copy URL Twitter E-mail

General

Target

6884ea22abd8a0b7b4063a86aad47718
Size

164KB
MD5

6884ea22abd8a0b7b4063a86aad47718
SHA1

6a59e5463a0b39a415600abb3485a2e59004d00f
SHA256

13c60403545e942db63ea71e49a192718f0b6d39f7634734f856aa0678194285
SHA512

ad7cf6fc0a86ad23157e327dfba74e0ee3a6c4bdd56e69ad8728cee887dee7038e1f172f2657be78262c869759f162fbccf070e59695fb88788f27f951e43158
SSDEEP

3072:Xy+hH/lPBze9vM6BkDgsR7j+tOb9RSDADeak7dJHB/Ad:FH1E4DnR71nSsQLH5Ad

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6884ea22abd8a0b7b4063a86aad47718

Files

6884ea22abd8a0b7b4063a86aad47718
.exe windows:4 windows x86 arch:x86

74ab4c83267934cea8db219fe8d77773

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
ReadFile
CloseHandle
CreateFileA
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
LocalUnlock
LocalFree
LocalLock
LocalAlloc
FindClose
FindFirstFileA
CreateDirectoryA
SetCurrentDirectoryA
lstrcpyA
WriteFile
SetFilePointer
GetFileSize
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
GetSystemTimeAsFileTime
WideCharToMultiByte
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSection
GetOEMCP
GetACP
GetCPInfo
HeapSize
Sleep
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
GetStdHandle
SetEnvironmentVariableA
ExitProcess
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc

user32

wvsprintfA
CharLowerBuffA
GetSystemMetrics
GetWindowRect
MoveWindow
SetWindowPos
UpdateWindow
GetClientRect
GetDlgItem
SetTimer
EnableWindow
KillTimer
SetWindowTextA
MessageBoxA
SendMessageA
EndDialog
DestroyWindow
DialogBoxParamA
DialogBoxIndirectParamA
ShowWindow
SetWindowLongA
SetClassLongA
DefWindowProcA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74ab4c83267934cea8db219fe8d77773

Headers

File Characteristics

Imports

kernel32

user32

shell32

urlmon

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 76KB - Virtual size: 73KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 76KB - Virtual size: 73KB