c6aaa6429d351be1ed5a2a6435b49efeed40fe2bca07bd33c25be4fd77b27e50

General

Target

c6aaa6429d351be1ed5a2a6435b49efeed40fe2bca07bd33c25be4fd77b27e50
Size

628KB
MD5

7c1093db0d81873c3a6175301fd1ad11
SHA1

315a520756907d9a4e4ed2864c681628cdaf6335
SHA256

c6aaa6429d351be1ed5a2a6435b49efeed40fe2bca07bd33c25be4fd77b27e50
SHA512

2236802795d62c59532499cbfc724a304232ae4f83f24041a381d5609fe1dfd831f85096b86ae4b6d5bab1bbd504b36daa20b6157c7b5375bfd794a0dff7d34c
SSDEEP

12288:KP1t69wa8pdu23ZtYiAD9x8EkX74WYPpfZVEU+btgIA:KfTeAtYZ9TbxBAx5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6aaa6429d351be1ed5a2a6435b49efeed40fe2bca07bd33c25be4fd77b27e50

Files

c6aaa6429d351be1ed5a2a6435b49efeed40fe2bca07bd33c25be4fd77b27e50
.exe windows:4 windows x86 arch:x86

6551a4c3e91ced5f25ac64dd00fbc247

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
UnhookWindowsHookEx
GetSystemMetrics
WindowFromPoint
mouse_event
PostMessageW
ToAscii
TranslateAcceleratorW
TrackPopupMenu

kernel32

VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCommandLineW
UnmapViewOfFile
lstrcatW
GetModuleHandleW
TlsFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

comctl32

InitCommonControlsEx

Sections

.text
Size: 530KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6551a4c3e91ced5f25ac64dd00fbc247

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 530KB - Virtual size: 529KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 45KB - Virtual size: 48KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 530KB - Virtual size: 529KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 45KB - Virtual size: 48KB

.rsrc
Size: 1KB - Virtual size: 1KB