c6cab2d0e507db25fa33f83fbbd41799

General

Target

c6cab2d0e507db25fa33f83fbbd41799
Size

117KB
MD5

c6cab2d0e507db25fa33f83fbbd41799
SHA1

63d2ff10da44b4ddcd3422d1cb0180d41c8adbbd
SHA256

e71417999297d09468d7dce99ad812ddd2e6931c64300d7fcab950c8dd391a99
SHA512

c12ee39013088bf1059f21d06734b8612caee243fc9c9b2de2f4aec26f1b88771d87cb6671e697222dcb275cc5c9c76fb59533980d3160efb2eb3ad25e29079e
SSDEEP

3072:n3S8Iy/aNagTeo6isinB6ZmQGU0yS+y2Q18mn6FEG57:hRriyz0ySL2Q18A6Ft5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6cab2d0e507db25fa33f83fbbd41799

Files

c6cab2d0e507db25fa33f83fbbd41799
.exe windows:4 windows x86 arch:x86

49f6a586217f28d1e4e7f7799ce68d2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
__dllonexit
_onexit
srand
strtok
atoi
sprintf
malloc
rand
free
fopen
fclose
_adjust_fdiv
_controlfp

kernel32

GetModuleFileNameA
GetCommandLineA
GetTickCount
CreateFileA
WriteFile
CloseHandle
GetModuleHandleA
GetProcAddress
OutputDebugStringA
Sleep
GetStartupInfoA
DeleteFileA

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA
SHGetFileInfoA

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lxamwhy
Size: - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

49f6a586217f28d1e4e7f7799ce68d2c

Headers

File Characteristics

Imports

wsock32

msvcrt

kernel32

user32

shell32

ole32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 1024B - Virtual size: 822B

.data Size: 46KB - Virtual size: 46KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 34KB - Virtual size: 33KB

.reloc Size: 4KB - Virtual size: 32KB

lxamwhy Size: - Virtual size: 84KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 1024B - Virtual size: 822B

.data
Size: 46KB - Virtual size: 46KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 4KB - Virtual size: 32KB

lxamwhy
Size: - Virtual size: 84KB