b6c0a4719d8ff9a4d06065803fa24f8e

General

Target

b6c0a4719d8ff9a4d06065803fa24f8e
Size

31KB
MD5

b6c0a4719d8ff9a4d06065803fa24f8e
SHA1

1a27393723288894b05a45152bb0d61ebcb3befe
SHA256

942ea7c6ba3bb7121fcb55a0638735ae591e19ff7b8b54ebae0dc18dc7cdee3a
SHA512

4514994186971531782d841cd6458d059bea5eaca91e3304236547ce2ac846c7778978493ba27bbfe58e0597ba4b1400d182e6e462b014d2c2e51860f8628950
SSDEEP

768:jB4K1E5mVlHYRYP2rEWIfeJjbsaRCUzkkyAOb:juKKk5J72ZCwkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6c0a4719d8ff9a4d06065803fa24f8e

Files

b6c0a4719d8ff9a4d06065803fa24f8e
.exe windows:4 windows x86 arch:x86

b637b59af7f35387e3264c6918a766aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateEventA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WaitForSingleObject
Sleep
CloseHandle
DeleteFileA
ExitThread
GetModuleFileNameA
lstrcpyA
GetProcessHeap
HeapFree
SetEvent
CreateThread
GetSystemDirectoryA
CreateProcessA
lstrlenA
lstrcmpA
WaitForMultipleObjects
ResetEvent
WaitForSingleObjectEx
WriteFileEx
SizeofResource
LoadResource
FindResourceA
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcatA
SetFileAttributesW
HeapAlloc
SetFileAttributesA

user32

PeekMessageA
CreateWindowExA
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
TranslateMessage
wsprintfA

advapi32

RegNotifyChangeKeyValue
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b637b59af7f35387e3264c6918a766aa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 20KB - Virtual size: 19KB