d6a8d40b6956970c395cc81e4b6688f6

General

Target

d6a8d40b6956970c395cc81e4b6688f6
Size

138KB
MD5

d6a8d40b6956970c395cc81e4b6688f6
SHA1

46a9309a5ae6fec79d67a8c925231e1eae380fea
SHA256

edf9b0b711a4c72d42b56f50c794cb039a628fa799d7ee55c0eef616af51f285
SHA512

023c49329e4f4cc05820cdd3d10e98112879e949343832ab80329a931bb94acbb6e4b0afb94aaa1143d11c3cd829df7806919f30e59665484d381d202c3debe5
SSDEEP

1536:kMeO61uFyYqLLuj/j46LPUh8Rb3hlBtMLqvFbes7LStMD0oBHcdSPstIy9L0soxH:OO6MlbPUh8RrhlqqvF7D3H8tuVDzZLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a8d40b6956970c395cc81e4b6688f6

Files

d6a8d40b6956970c395cc81e4b6688f6
.exe windows:5 windows x86 arch:x86

e96bf5884fcd17ac1cbcd38aac815e49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetACP
VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
HeapFree
GetProcessHeap
LoadLibraryA
HeapAlloc
GetThreadContext
Sleep
GetCurrentProcessId
lstrlenA
LCMapStringW
GetModuleHandleW
ExitProcess
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA

shlwapi

wnsprintfA

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e96bf5884fcd17ac1cbcd38aac815e49

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 5KB - Virtual size: 4KB