c64fafbef94058988fcc1cc3606031e4

General

Target

c64fafbef94058988fcc1cc3606031e4
Size

745KB
MD5

c64fafbef94058988fcc1cc3606031e4
SHA1

7122d4beb8dbd23cc8765e3243fe6f6c8d9175ff
SHA256

a49c9b8d119d1a5f9bad56acc19f072c94a485873bc7c51f0a6126663a1c383a
SHA512

a10bf99519bcd6086d85cb54ca479b869f3493b8f4cdb3afaf76d5c652b6b4e96749fd9e3cc45acdff02cc65725bb907d74fd508be302601c70026b982c0ad55
SSDEEP

12288:edC7hN4Xj9LD03c5tLLexd3UYwKpZ8RW4aYQ9gA3dYDwHPHeIvul:edg3cPLLaqYwKpZt4wWmvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c64fafbef94058988fcc1cc3606031e4

Files

c64fafbef94058988fcc1cc3606031e4
.exe windows:4 windows x86 arch:x86

02838c1923cae3a5ea1a8c8592962745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTickCount
UnmapViewOfFile
IsValidCodePage
SetConsoleMode
VirtualProtect
CreateMutexA
OpenSemaphoreA
GetLogicalDrives
HeapDestroy
FindVolumeClose
GetLastError
SetConsoleTitleA
InterlockedExchange
FindClose
ReleaseMutex
SetConsoleIcon
ExitProcess
LoadLibraryA
CloseHandle
SetEvent

advapi32

RegFlushKey
RegLoadKeyA
GetFileSecurityA
CloseServiceHandle
IsValidSid
CredFree
RegQueryInfoKeyA
RegCloseKey
CloseTrace
GetUserNameA
EqualSid
RegEnumValueA
CloseEventLog
GetLengthSid
OpenEventLogA
ReportEventA
CopySid
LsaClose
RegEnumKeyExA
OpenTraceA
RegQueryValueExA
IsValidAcl
RegSaveKeyA
FreeSid
RegCreateKeyExA
CredReadA
LsaFreeMemory
IsTextUnicode
GetAce

wininet

DetectAutoProxyUrl
FindCloseUrlCache
HttpSendRequestA
HttpQueryInfoA
DeleteUrlCacheEntryA

user32

MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02838c1923cae3a5ea1a8c8592962745

Headers

File Characteristics

Imports

kernel32

advapi32

wininet

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 2.1MB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 2.1MB

.rsrc
Size: 4KB - Virtual size: 4KB