c67f0c306204a262de4b9910c966d117

Sharing

Copy URL Twitter E-mail

General

Target

c67f0c306204a262de4b9910c966d117
Size

170KB
MD5

c67f0c306204a262de4b9910c966d117
SHA1

0046906b37fa01bb6ecdee7bc4bdfb58d9e13372
SHA256

aed3d95e66c3c4bdcd5beb290808231e895d2a0e5ea028eb1f8cdfd343ce8376
SHA512

cf88cb6951f936250e8f03ac89ab604fc3f3803460b137576ee05695dcbda3ab34b3b24baa6fccff92cee144478237c03b29bfb94369eb10b4aa5b0dc4a510ec
SSDEEP

3072:LKaEvyj9h19Qyy2woldySHU98gsP5ygU:LKLqjn1SyyKhH6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c67f0c306204a262de4b9910c966d117

Files

c67f0c306204a262de4b9910c966d117
.exe windows:4 windows x86 arch:x86

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

SetScrollInfo
ChildWindowFromPoint
GetActiveWindow

gdi32

CreateDIBSection
SetTextColor
GetBitmapBits
SetBkMode
CreatePalette
RestoreDC
GetDIBits
CreateCompatibleDC
SelectPalette
SetPixel

advapi32

RegCreateKeyA
GetLengthSid
RegEnumValueA
RegCreateKeyExA

kernel32

VirtualAlloc
GetCommandLineA
GetACP
GetCommandLineW
ExitThread
LocalAlloc
GetProcAddress
GetVersionExA
IsBadReadPtr
LoadLibraryExA
GetModuleHandleA
ExitProcess
GlobalAlloc

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES80
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES83
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES56
Size: 1024B - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES12
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES86
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES57
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES36
Size: 1024B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES03
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 138KB - Virtual size: 138KB

RES80 Size: 512B - Virtual size: 511B

RES83 Size: 1024B - Virtual size: 809B

RES56 Size: 1024B - Virtual size: 875B

RES12 Size: 2KB - Virtual size: 1KB

RES86 Size: 1KB - Virtual size: 1KB

RES57 Size: 1024B - Virtual size: 738B

RES36 Size: 1024B - Virtual size: 761B

RES03 Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 138KB - Virtual size: 138KB

RES80
Size: 512B - Virtual size: 511B

RES83
Size: 1024B - Virtual size: 809B

RES56
Size: 1024B - Virtual size: 875B

RES12
Size: 2KB - Virtual size: 1KB

RES86
Size: 1KB - Virtual size: 1KB

RES57
Size: 1024B - Virtual size: 738B

RES36
Size: 1024B - Virtual size: 761B

RES03
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB