c6d924bdb6f7206d98b052f1dd004717

Sharing

Copy URL Twitter E-mail

General

Target

c6d924bdb6f7206d98b052f1dd004717
Size

218KB
MD5

c6d924bdb6f7206d98b052f1dd004717
SHA1

f85b746e52053fdd0c0e4e54d5705ebcdedae624
SHA256

5eea0718eaa19d264bc9e619893f7b077825e8484745d4acf40a81a344832d0e
SHA512

f0c12ef27bb4a770edb8cfa3c1f7c189032f34728f8233326f1dff1e7ba1e5678bb23784e5cd33ccb8562cde759e4e19ae0a9337578de86a5420a952e1f55f65
SSDEEP

6144:XHDI3UJ1rCshMTIqGty174K66mno4U6S:XjI3cNCs6Uqfn66mno4UP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6d924bdb6f7206d98b052f1dd004717

Files

c6d924bdb6f7206d98b052f1dd004717
.exe windows:4 windows x86 arch:x86

1d286c77bbe013eee8d706b5818c52e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysReAllocStringLen
SafeArrayCreate
VariantChangeType
SafeArrayPtrOfIndex
SysFreeString
OleLoadPicture
RegisterTypeLib
SafeArrayUnaccessData
SafeArrayGetElement

comctl32

ImageList_Write
ImageList_DragShowNolock
ImageList_Add

shell32

SHGetFolderPathA
DragQueryFileA

version

VerInstallFileA
VerQueryValueA

user32

DefWindowProcA
WaitMessage

gdi32

GetObjectA
GetDCOrgEx
SetBkMode
GetPixel
GetClipBox
GetDIBits

shlwapi

PathIsContentTypeA
SHQueryInfoKeyA
SHStrDupA
SHEnumValueA

advapi32

RegOpenKeyA

kernel32

EnterCriticalSection
GetCommandLineA
IsBadReadPtr
GetCommandLineW
GetProcAddress
GetTickCount
SetLastError
ExitThread
LoadLibraryA
GetACP
ExitProcess
VirtualAllocEx
FindFirstFileA
GetVersionExA
GetModuleHandleA
GlobalAlloc
MoveFileA
VirtualAlloc
GetThreadLocale
lstrcmpiA
GetOEMCP
LocalAlloc

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC8
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC0
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d286c77bbe013eee8d706b5818c52e5

Headers

File Characteristics

Imports

oleaut32

comctl32

shell32

version

user32

gdi32

shlwapi

advapi32

kernel32

Sections

.text Size: 65KB - Virtual size: 65KB

DATA Size: 141KB - Virtual size: 141KB

.RSRC8 Size: 2KB - Virtual size: 1KB

.RSRC4 Size: 1KB - Virtual size: 1KB

.RSRC0 Size: 1024B - Virtual size: 992B

.RSRC6 Size: 1024B - Virtual size: 998B

.RSRC3 Size: 1KB - Virtual size: 1KB

.RSRC1 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 65KB - Virtual size: 65KB

DATA
Size: 141KB - Virtual size: 141KB

.RSRC8
Size: 2KB - Virtual size: 1KB

.RSRC4
Size: 1KB - Virtual size: 1KB

.RSRC0
Size: 1024B - Virtual size: 992B

.RSRC6
Size: 1024B - Virtual size: 998B

.RSRC3
Size: 1KB - Virtual size: 1KB

.RSRC1
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 924B