ca6d013056992496ce273fc465a713a2

Sharing

Copy URL Twitter E-mail

General

Target

ca6d013056992496ce273fc465a713a2
Size

294KB
MD5

ca6d013056992496ce273fc465a713a2
SHA1

1f68cb84a7869667d3afc4a2d7d2ab7976875478
SHA256

9024c2b51906cc3d26673c10c5c3e035a2e4dbd2fe42ee4a2377d7af5394c5f8
SHA512

9f0b3253eb7c3277a51773b5fa55ec2535e9a5898cf455452d5f4cb37b9228ae65c35a0dfe009d5378988564496433c91a170b927eaa9c29d0d66d3a2df29b11
SSDEEP

6144:5/YWypNK+U74PexnUJVMu+KRQQlYjeh9d:5/YWypNw74Pexnbu+wLYCbd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca6d013056992496ce273fc465a713a2

Files

ca6d013056992496ce273fc465a713a2
.exe windows:5 windows x86 arch:x86

34623d3ffa5b30733e46c6a3470a352d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LocalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
CreateFileW
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetProcAddress
InterlockedDecrement
FreeLibrary
DeleteFileA
CloseHandle
CreateToolhelp32Snapshot
GetModuleFileNameA
Process32Next
GetLastError
MultiByteToWideChar
TerminateProcess
Sleep
GetVolumeInformationA
WriteFile
GetProcessHeap
Process32First
HeapFree
HeapAlloc
lstrlenA
GetFileSize
GetModuleHandleA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapReAlloc
VirtualFree
HeapCreate
LoadLibraryA
CreateFileA
WideCharToMultiByte
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RemoveDirectoryA
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
VirtualAlloc
GetModuleHandleW
GetCommandLineA
GetCPInfo
RtlUnwind
LCMapStringA
LCMapStringW
GetTimeZoneInformation
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateDirectoryA

user32

FindWindowExA
MoveWindow
ShowWindow
EnumChildWindows
SendMessageA
FindWindowA
wsprintfA
GetClassNameA

advapi32

GetNamedSecurityInfoA
RegEnumKeyA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
SetEntriesInAclA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

ole32

CoInitializeEx
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoUninitialize

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit

wininet

InternetCheckConnectionA

ws2_32

WSACleanup
WSAStartup
inet_ntoa
gethostbyname

iphlpapi

GetNetworkParams

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34623d3ffa5b30733e46c6a3470a352d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

ws2_32

iphlpapi

Sections

.text Size: 149KB - Virtual size: 149KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 106KB - Virtual size: 113KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 149KB - Virtual size: 149KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 106KB - Virtual size: 113KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 11KB - Virtual size: 10KB