c6040005ffed45f71174519d8c11131d

General

Target

c6040005ffed45f71174519d8c11131d
Size

2.1MB
MD5

c6040005ffed45f71174519d8c11131d
SHA1

c2e5f77be8737c4551669fc75e7ab011d6c2d543
SHA256

16dea75c16428124758f07647bb58540df8d1adaa4279f3ad71e1bef3cf8a1f8
SHA512

9f5752bdd5f784f8588202d024dfaa3502d4c270e731230a51f67d8e892cde59525b3997f59141019ca26604eedc0ef76a57dcd2eb4aada8d906cda26ac474f2
SSDEEP

49152:mfkmrJK3r9ryNx0YKLOZ/DZ2kVx+sw3f9R7X:er83rpYKiVl2k9i/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6040005ffed45f71174519d8c11131d

Files

c6040005ffed45f71174519d8c11131d
.exe windows:4 windows x86 arch:x86

fccd5a4051d8e39e8c367266da3dbb06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
RegSetValueExA
AdjustTokenPrivileges
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
GetTokenInformation
RevertToSelf
SetSecurityDescriptorControl
ImpersonateSelf
CryptDestroyKey
GetFileSecurityW
CryptReleaseContext

comdlg32

GetOpenFileNameW
ChooseColorW
PrintDlgW

msvcrt

_onexit
__dllonexit
_except_handler3
exit
__getmainargs
__set_app_type
__p__commode
_XcptFilter
__p__fmode
memmove
malloc
_exit
_adjust_fdiv
_controlfp
_initterm
__setusermatherr
_acmdln

kernel32

VirtualFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
GetLastError
GetModuleHandleA
LoadLibraryA
GetStartupInfoA
GetTickCount
TerminateProcess
QueryPerformanceCounter
Sleep
GetProcAddress
IsDebuggerPresent
GetCurrentProcessId
InterlockedExchange
VirtualAlloc
GetCurrentProcess
GetSystemTimeAsFileTime
WideCharToMultiByte
GetCurrentThreadId
SetLastError
FreeLibrary
MultiByteToWideChar

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fccd5a4051d8e39e8c367266da3dbb06

Headers

File Characteristics

Imports

advapi32

comdlg32

msvcrt

kernel32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 508B

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 508B

.rsrc
Size: 20KB - Virtual size: 16KB