8f6a6f1c76fb19817e46372fcf18e4e3

General

Target

8f6a6f1c76fb19817e46372fcf18e4e3
Size

191KB
MD5

8f6a6f1c76fb19817e46372fcf18e4e3
SHA1

1a15c071930cd809c9113c198f9611938ebf4ca5
SHA256

47b70023eda8b90d38484e0d6de22ae67d6572134bf7cbf1b34fbc641e5509d5
SHA512

fd3560a9617171fa685dffbbac8f011395b0c179d0388aac928db8846b944d5b51367642ae0bd5da3536b99465aaef17f6eca62509ee72630eef9613783c0abc
SSDEEP

3072:GgDzmMJ1BKPt4Dr/oJLJ4XvZZP5fCiWAvSs1TzxAGwDj0DW8xtI7mw440lSSSZr:GpMJ1BKPtio8fClKH1TFM0DFOI4XSS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f6a6f1c76fb19817e46372fcf18e4e3

Files

8f6a6f1c76fb19817e46372fcf18e4e3
.exe windows:4 windows x86 arch:x86

a0b895556aac02c383cf0e18ba3d1f29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetProcAddress
GetModuleHandleA
FormatMessageA
GetModuleFileNameA
GetVolumeInformationA
GetVersionExA
GetSystemDirectoryA
GetFileSize
SetFilePointer
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
ReadFile
CloseHandle
WriteFile
CopyFileA
LoadLibraryA
GetLastError
MoveFileA
DeleteFileA
HeapAlloc
ExitProcess
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
HeapFree
HeapSize
HeapReAlloc
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetStdHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetEnvironmentVariableA

advapi32

RegSetValueExA
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0b895556aac02c383cf0e18ba3d1f29

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 16B