6fa7c166abc0a239e7e798fdcbf3ea24

General

Target

6fa7c166abc0a239e7e798fdcbf3ea24
Size

42KB
MD5

6fa7c166abc0a239e7e798fdcbf3ea24
SHA1

953f034ce38121ac18b102a54405b10965bca087
SHA256

7c4a58eee1d0ad4c8c05b183faaa790f43a1162c5ade71ed26b7c735d581c941
SHA512

d53632bfce571421662853d8b6d54b5b26071dd0ed314544a89255054b8cb40b53833ac4fae530fb9c815f892be71055e4ca660ef855ef00fe5fb53b1c491739
SSDEEP

768:N+1NSy6M1OVh0j2ARgOvW7fawynAD65ok0iYbeMAxauPf2sSM5jj:N+/6zrkRET2AD65ok0iJzzPWM5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fa7c166abc0a239e7e798fdcbf3ea24

Files

6fa7c166abc0a239e7e798fdcbf3ea24
.exe windows:6 windows x64 arch:x64

440de37dd5bd6e88051cfce188865655

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegGetValueW
RegCloseKey
RegOpenKeyExW

kernel32

HeapSetInformation
GetProcessHeap
GetLastError
FreeLibrary
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FormatMessageW
HeapFree
GetSystemWindowsDirectoryW
HeapAlloc
GetCommandLineW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
LocalFree
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep

msvcrt

?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_wcsicmp
wprintf
memset
memcpy

shell32

CommandLineToArgvW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

440de37dd5bd6e88051cfce188865655

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 360B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 27KB - Virtual size: 28KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 360B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 27KB - Virtual size: 28KB