d6b6b881c9819e3f7f0c9b3dd15c65fd

General

Target

d6b6b881c9819e3f7f0c9b3dd15c65fd
Size

131KB
MD5

d6b6b881c9819e3f7f0c9b3dd15c65fd
SHA1

0398aac10997b4c64506a3be66845da8a31ba2ab
SHA256

c61c1b39c62fbfc68639212d97f2bac23aef8f476aafc8db0f5202ae4c1ec509
SHA512

111b227c6d84d4f2caf78424674d4c28487152fde37806a033ff687c2512b7ba0293c1eda9afbcabdb4c25f5eaf73bf90291c9992701957443a1664725c6ef28
SSDEEP

3072:ob1yE4Eg7yr8s5vJ4rMe9p/zzg3asySEEku0wa0nfUVYq:XJO4sjYMe9p/zzg3asyPfX08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b6b881c9819e3f7f0c9b3dd15c65fd

Files

d6b6b881c9819e3f7f0c9b3dd15c65fd
.exe windows:4 windows x86 arch:x86

0ecd979743df52fc157ebc69799c4e28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
CreateThread
DeleteFileA
FindNextFileA
FlushFileBuffers
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableA
GetFileSize
GetFullPathNameA
GetLastError
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStringTypeA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GlobalHandle
IsBadWritePtr
LoadLibraryA
LoadResource
Module32First
Module32Next
MoveFileExA
MulDiv
OutputDebugStringA
ReadFile
RemoveDirectoryA
ResumeThread
RtlUnwind
SetEnvironmentVariableA
SetErrorMode
SetHandleCount
SetPriorityClass
SetThreadPriority
SuspendThread
UnhandledExceptionFilter
WritePrivateProfileStringA

advapi32

AllocateAndInitializeSid
RegDeleteValueA

Sections

.code
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ecd979743df52fc157ebc69799c4e28

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.code Size: 88KB - Virtual size: 88KB

.data Size: - Virtual size: 504B

.bss Size: - Virtual size: 13KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 6KB - Virtual size: 5KB

.rsrc Size: 34KB - Virtual size: 34KB

.code
Size: 88KB - Virtual size: 88KB

.data
Size: - Virtual size: 504B

.bss
Size: - Virtual size: 13KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 34KB - Virtual size: 34KB