b6bf51af8afaed4ab0bb78ed6f7d17c6

General

Target

b6bf51af8afaed4ab0bb78ed6f7d17c6
Size

421KB
MD5

b6bf51af8afaed4ab0bb78ed6f7d17c6
SHA1

04824d1c75c634db79937a9ecf3d8c00ca8c2a74
SHA256

4c82c46bf49223d2df33109d6bc8ef76f61e576ba3c630d3edb955669579456a
SHA512

7c0f18f9c5580c3d68c62ebcf40fa11606715a502bf794ae62f0dd4c44e6b27e761e90e6aa68739e5e6f33b66267b60ca204c681ddd5c98cb3a306a20a1a9b17
SSDEEP

6144:hbxbRmOjdi6j8ui5bzlrOiyxPZiJynyJKh14Sj4bCQZL2QHTJmFIWk1+hMQsvzXU:n4z6QfhYffGatQnN2QH9Mlk1NvzH8uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bf51af8afaed4ab0bb78ed6f7d17c6

Files

b6bf51af8afaed4ab0bb78ed6f7d17c6
.exe windows:4 windows x86 arch:x86

9cd0e79d26d50437ba482b6f10de251d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PrintDlgW

kernel32

VirtualAlloc
MultiByteToWideChar
HeapCreate
RtlUnwind
EnterCriticalSection
FreeEnvironmentStringsA
IsBadWritePtr
WriteFile
GetStdHandle
LoadLibraryA
TlsFree
QueryPerformanceCounter
CreateEventA
GetCommandLineW
HeapReAlloc
GetProfileStringW
TlsSetValue
SetHandleCount
LocalFileTimeToFileTime
GetLastError
GetStartupInfoW
GetCommandLineA
GetCurrentProcess
GetModuleHandleA
VirtualQuery
InterlockedExchange
ExitProcess
GetCurrentProcessId
LeaveCriticalSection
TerminateProcess
GetFileType
TlsAlloc
GetSystemTimeAsFileTime
HeapDestroy
GetTimeFormatA
InitializeCriticalSection
GetCurrentThread
UnhandledExceptionFilter
GetEnvironmentStringsW
GetStartupInfoA
GetEnvironmentStrings
GetProcAddress
SetLastError
HeapAlloc
DeleteCriticalSection
GetModuleFileNameA
GetTickCount
TlsGetValue
GetVersion
GetModuleFileNameW
GetCurrentThreadId
VirtualFree
FreeEnvironmentStringsW
LocalAlloc
HeapFree

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cd0e79d26d50437ba482b6f10de251d

Headers

File Characteristics

Imports

comdlg32

kernel32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 2KB - Virtual size: 16KB

.data Size: 276KB - Virtual size: 276KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 2KB - Virtual size: 16KB

.data
Size: 276KB - Virtual size: 276KB

.rsrc
Size: 10KB - Virtual size: 9KB