b06f5ec4ac5defbea909acec4d3b80a4357130613bb9edeb638f7d21d517f8d5

Sharing

Copy URL Twitter E-mail

General

Target

b06f5ec4ac5defbea909acec4d3b80a4357130613bb9edeb638f7d21d517f8d5
Size

90KB
MD5

6396ebd3861b7a5f8937acac7c802e93
SHA1

3b63f8bb38c8ef70c7a54b2ec666a65f27c2fde5
SHA256

b06f5ec4ac5defbea909acec4d3b80a4357130613bb9edeb638f7d21d517f8d5
SHA512

9d0d9f14e58aa409d32afaf631ebbee63f01e41c3edf177d7ac77f5dd4567973a7e8eff258acca8eec61a780e39e9b6a8061f8f27e213f35b611b9ff91cff097
SSDEEP

1536:ZGSsFqauHaXo1ZVaWIjhF5UG/DofuVJZc8fkXUP/0+YjCnf/z9F30/RPSrEgnm8:ASsFq9aYZVa3romV3cfXwnpKPoEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b06f5ec4ac5defbea909acec4d3b80a4357130613bb9edeb638f7d21d517f8d5

Files

b06f5ec4ac5defbea909acec4d3b80a4357130613bb9edeb638f7d21d517f8d5
.exe windows:5 windows x86 arch:x86

a9fa2228b51ffefbae62aff89bb7bf3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

FindExecutableW
FindExecutableA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

advapi32

RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

kernel32

IsProcessorFeaturePresent
CreateFileW
GetCurrentDirectoryA
GetCurrentDirectoryW
WriteConsoleW
SetCurrentDirectoryA
Sleep
GetModuleFileNameA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetModuleHandleW
ExitProcess
DecodePointer
HeapFree
DeleteFileA
HeapAlloc
GetCommandLineA
HeapSetInformation
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetFileAttributesA
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
RemoveDirectoryA
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
HeapReAlloc
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetDriveTypeW
SetEndOfFile
GetProcessHeap
ReadFile
GetTimeZoneInformation
CompareStringW
SetEnvironmentVariableA
HeapSize
GetStringTypeW

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9fa2228b51ffefbae62aff89bb7bf3f

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

kernel32

Sections

.text Size: 62KB - Virtual size: 62KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 21KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 62KB - Virtual size: 62KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 21KB

.reloc
Size: 4KB - Virtual size: 4KB