c60486ec1c658730551baa5c82069a1c

General

Target

c60486ec1c658730551baa5c82069a1c
Size

112KB
MD5

c60486ec1c658730551baa5c82069a1c
SHA1

7aee3ab853887becb3f0520278b4d6b1453a9a8c
SHA256

7daea84f5d22d5d8d0037a1a71bf4d53bd5d23cb0be2b57addf1769faa1c212d
SHA512

a73a8d273650c1eeef2b68814371ded5fd6fd245fe907b10a756006944b073f5f7feb0598505c9db6ac53c3f6ca8868773c11bf4ff10a8b3c25d011b8f6bd662
SSDEEP

1536:CqoSylfkTUEnk+FMD1XPjYUB0cUySfLCwBaFSiv8j+:CzSylfkTUEnSXrFB0LykLCwwFSit

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c60486ec1c658730551baa5c82069a1c

Files

c60486ec1c658730551baa5c82069a1c
.exe windows:4 windows x86 arch:x86

00f3f431d455a3c9ac3e80c3efd1cfa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
GetStartupInfoA
Sleep
SetFilePointer
ReadFile
lstrcmpA
SetLastError
lstrcpyA
GetLocalTime
LoadResource
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
lstrlenA
CloseHandle
MoveFileA
SetFileAttributesA
FreeLibrary
DeleteFileA
GetSystemDirectoryA
MultiByteToWideChar
ExitProcess
lstrcatA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
HeapFree
LoadLibraryA
GetProcAddress

user32

PostThreadMessageA
wsprintfA
GetInputState
GetMessageA

advapi32

GetFileSecurityA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
LookupAccountNameA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
AddAce
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
GetUserNameA
StartServiceA
OpenServiceA
RegCreateKeyExA

msvcrt

_XcptFilter
_except_handler3
realloc
malloc
??2@YAPAXI@Z
strchr
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_strrev
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00f3f431d455a3c9ac3e80c3efd1cfa6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 100KB - Virtual size: 100KB