c6de306e5f5098977785d6edf6e855d4

General

Target

c6de306e5f5098977785d6edf6e855d4
Size

20KB
MD5

c6de306e5f5098977785d6edf6e855d4
SHA1

30037ba4160d8f42be3389d87e6f3fa492f5e235
SHA256

4a16a8f2ddbb1dd60cfb254fa787b061fe87c3108748aba5077fcaee10f44e89
SHA512

84c7d5c3f1fa1298e92fef62f1c996f0da013daabb0adb055a7bf7c26e800db2f485448a4f7055e08995660b848c94d465170d8a542be6089d289fb6695fd29c
SSDEEP

384:CiGMT2iKm7WUGtx5ZN7jgshpoxrnFuuS/IM65Xwzp:xGMTxV7W3xTWnFu7QM65Xw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6de306e5f5098977785d6edf6e855d4

Files

c6de306e5f5098977785d6edf6e855d4
.dll windows:4 windows x86 arch:x86

af9fa86c2484b12faa27eb4163cc347a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
GetCurrentProcessId
ReadProcessMemory
GetCurrentProcess
IsBadReadPtr
GetProcAddress
GetModuleHandleA
WriteProcessMemory
GlobalUnlock
ExitProcess
TerminateProcess
OpenProcess
GetCurrentThreadId
CreateRemoteThread
GlobalFree
VirtualAllocEx
DeleteFileA
CreateFileA
WriteFile
GetFileSize
ReadFile
VirtualProtectEx
TerminateThread
SetThreadPriority
VirtualAlloc
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
VirtualFreeEx
CloseHandle

user32

GetInputState
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
GetWindowThreadProcessId
PostThreadMessageA
FindWindowA
GetMessageA
GetWindowTextA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af9fa86c2484b12faa27eb4163cc347a

Headers

File Characteristics

Imports

kernel32

user32

wininet

advapi32

Sections

.text Size: 17KB - Virtual size: 16KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB