6d422057fca94305553a30ffd055d222f7112e34c1f400ae596677b9ddfea60d

Sharing

Copy URL Twitter E-mail

General

Target

6d422057fca94305553a30ffd055d222f7112e34c1f400ae596677b9ddfea60d
Size

261KB
MD5

0b7e5abe4aeaa278e639646b2715d1dd
SHA1

6b00fa3a40b4a5ec1313c41ef885b3d816c0b4d2
SHA256

6d422057fca94305553a30ffd055d222f7112e34c1f400ae596677b9ddfea60d
SHA512

23aa0707b21fe7e6169995a5981ee3a370153c854dfca0e34fbb1f30a34dc13029ba40dc3a3893be2d71079c2a7daa83d7053e63f4985be56d3046b6e2c04993
SSDEEP

6144:fyFfYrVmfT3Dcn4SnI4y8k9dF7q7X37WfnW5qkmTZCYSlgjCK:SsmfT3Dcn4SnI4bkBgH7WfnWQzSleL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d422057fca94305553a30ffd055d222f7112e34c1f400ae596677b9ddfea60d

Files

6d422057fca94305553a30ffd055d222f7112e34c1f400ae596677b9ddfea60d
.exe windows:4 windows x86 arch:x86

46305af9b72f62e4c0af492d89b72996

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libgcc_s_sjlj-1

_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectA
LineTo
MoveToEx
Polygon
SelectObject
SetBkMode

kernel32

AllocConsole
DeleteCriticalSection
EnterCriticalSection
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
rand
signal
srand
strcmp
strlen
strncmp
system
time
vfprintf

user32

BeginPaint
CallNextHookEx
CloseClipboard
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EmptyClipboard
EndPaint
FillRect
FindWindowA
FindWindowExA
GetAsyncKeyState
GetClientRect
GetCursorPos
GetMessageA
GetSystemMetrics
InvalidateRect
KillTimer
LoadCursorA
LoadImageA
OpenClipboard
PostQuitMessage
PtInRect
RegisterClassA
RegisterClassExA
SendMessageA
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetLayeredWindowAttributes
SetTimer
SetWindowPos
SetWindowsHookExA
ShowWindow
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
keybd_event
mouse_event

winmm

mciSendStringA

libstdc++-6

_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4sizeEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE5c_strEv
_ZNSaIcEC1Ev
_ZNSaIcED1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6appendEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6appendEPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6appendERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7reserveEj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EOS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EPKcRKS3_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEED1Ev
_ZSt17__throw_bad_allocv
_ZSt20__throw_length_errorPKc
_ZdlPv
_Znwj
__cxa_begin_catch
__cxa_end_catch
__cxa_rethrow
__gxx_personality_sj0

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46305af9b72f62e4c0af492d89b72996

Headers

File Characteristics

Imports

libgcc_s_sjlj-1

gdi32

kernel32

msvcrt

user32

winmm

libstdc++-6

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 512B - Virtual size: 176B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 1KB

.idata Size: 5KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

/4 Size: 1024B - Virtual size: 744B

/19 Size: 131KB - Virtual size: 130KB

/31 Size: 3KB - Virtual size: 3KB

/45 Size: 10KB - Virtual size: 9KB

/57 Size: 5KB - Virtual size: 4KB

/70 Size: 3KB - Virtual size: 2KB

/81 Size: 1024B - Virtual size: 720B

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 512B - Virtual size: 176B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 5KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

/4
Size: 1024B - Virtual size: 744B

/19
Size: 131KB - Virtual size: 130KB

/31
Size: 3KB - Virtual size: 3KB

/45
Size: 10KB - Virtual size: 9KB

/57
Size: 5KB - Virtual size: 4KB

/70
Size: 3KB - Virtual size: 2KB

/81
Size: 1024B - Virtual size: 720B