60c20e0344abecab1eae98e511398ff44e251c411de9e40a0c6a16a892a854da

Sharing

Copy URL Twitter E-mail

General

Target

60c20e0344abecab1eae98e511398ff44e251c411de9e40a0c6a16a892a854da
Size

1.4MB
MD5

87c4c8143d6cdc0c4437bc6792c2e385
SHA1

b0bb21e4b32b984feb66500671cee993ae613874
SHA256

60c20e0344abecab1eae98e511398ff44e251c411de9e40a0c6a16a892a854da
SHA512

1a82bd1ad39ef85cccb1f32120102b4025d66c6c2576cc3de3e7226634beb86646a17f7a533e1b26e3b6e62a62c4dc5f6f6e059fa74444bd9d16a2462b4c0e8d
SSDEEP

24576:OrJC36pO2HhA7HM/1huMmvhxBgbxsepxgglPEPWvkmE3AG3Y:OrJC3/2HYsHmJXgWepahlA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60c20e0344abecab1eae98e511398ff44e251c411de9e40a0c6a16a892a854da

Files

60c20e0344abecab1eae98e511398ff44e251c411de9e40a0c6a16a892a854da
.exe windows:5 windows x86 arch:x86

4d98a0d3fbffa0ee84a63e5a504c2d3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\VS2015\DunRunGate\FreeXg\RunGate.pdb

Imports

psapi

GetProcessImageFileNameA

kernel32

GetVersionExW
CreateMutexA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetWindowTextLengthA

gdi32

SetTextColor

comdlg32

GetSaveFileNameW

advapi32

OpenProcessToken

shell32

DragQueryFileW

ole32

CoTaskMemRealloc

oleaut32

VarUI4FromStr

comctl32

CreateStatusWindowW

ws2_32

setsockopt

iphlpapi

GetExtendedTcpTable

wininet

HttpEndRequestW

Sections

.text
Size: - Virtual size: 623KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.beta0
Size: - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.beta1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d98a0d3fbffa0ee84a63e5a504c2d3b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

psapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

iphlpapi

wininet

Sections

.text Size: - Virtual size: 623KB

.rdata Size: - Virtual size: 134KB

.data Size: - Virtual size: 22KB

.gfids Size: - Virtual size: 340B

.beta0 Size: - Virtual size: 936KB

.beta1 Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 7KB - Virtual size: 45KB

.text
Size: - Virtual size: 623KB

.rdata
Size: - Virtual size: 134KB

.data
Size: - Virtual size: 22KB

.gfids
Size: - Virtual size: 340B

.beta0
Size: - Virtual size: 936KB

.beta1
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 7KB - Virtual size: 45KB