6ff32dd997f4079ac538b62ca353c835

General

Target

6ff32dd997f4079ac538b62ca353c835
Size

172KB
MD5

6ff32dd997f4079ac538b62ca353c835
SHA1

948f373442929dbde6bb0c3026e89a205757c92e
SHA256

75fa94a6b4b4835c5a88a947b8ab15dd9f0c3f18730f59d5e16bcf8065409af7
SHA512

b7f4cd70eff3d38e9b62cfe87fa6a20a2d0dfa0bb55589b7d77656548ead37fa93e2532a6a32d1d39dcf1c0350e8502430e8bb2ad93510705ad87c827cf5762f
SSDEEP

3072:exhegSDethLdeg/r5m2Lg6PdKcHi5DePwD34HYKH:Ah3SCLdeI3Psqi5DePwD31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff32dd997f4079ac538b62ca353c835

Files

6ff32dd997f4079ac538b62ca353c835
.exe windows:4 windows x86 arch:x86

29f10b82102734114a8164efe1182bd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcAddress
LoadLibraryA
lstrcatA
VirtualAlloc
Sleep
GetModuleHandleA
CloseHandle
lstrcmpiA
CreateToolhelp32Snapshot
ExitProcess
ReadFile
SetFilePointer
CreateFileA
FreeResource
WriteFile
lstrlenA
SizeofResource
LoadResource
lstrcpyA
GetTickCount
SetLastError
DeleteFileA
GetLastError
MoveFileA
CreateThread
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateDirectoryA
GetCurrentThreadId
WinExec
GetStringTypeA
LCMapStringW
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
HeapReAlloc
RtlUnwind
GetStartupInfoA
GetVersion
HeapFree
VirtualFree
IsBadWritePtr
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

ShellExecuteA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29f10b82102734114a8164efe1182bd3

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 116KB - Virtual size: 113KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 116KB - Virtual size: 113KB