6ab4724130bcfe90d979c4ebdb305173dc63c1b108f1b84a47f5ab6281270582

General

Target

6ab4724130bcfe90d979c4ebdb305173dc63c1b108f1b84a47f5ab6281270582
Size

7KB
MD5

f698186b828e0b4681d59bf7d229d5a5
SHA1

ce12a14077d195b284e76758e439a8d20c471e18
SHA256

6ab4724130bcfe90d979c4ebdb305173dc63c1b108f1b84a47f5ab6281270582
SHA512

58113e03340f308a0b5c85928e86b15fdadd9054f7397d66a3664bf7f68489dae3e434d9c415888aa06f74d5ea40af486014ee66834eb5224050ae9a6573e52d
SSDEEP

96:bK2b/BPrdRyDN5t9LT+YmAWPzdM8Jz4FJxSE4y2FFp3C7tCEIr:W2b/BPuPJ+eotJ0FJx34ymFpcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab4724130bcfe90d979c4ebdb305173dc63c1b108f1b84a47f5ab6281270582

Files

6ab4724130bcfe90d979c4ebdb305173dc63c1b108f1b84a47f5ab6281270582
.exe windows:5 windows x86 arch:x86

652bad30af4f722f78dcc1034111fbb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

__dllonexit
_lock
_onexit
_decode_pointer
_unlock
_invoke_watson
_controlfp_s
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_except_handler4_common
_amsg_exit

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW

shlwapi

PathFileExistsW

kernel32

GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
ExpandEnvironmentStringsW
CreateFileW
CloseHandle
Sleep
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId

user32

wsprintfW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

652bad30af4f722f78dcc1034111fbb2

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

wininet

shlwapi

kernel32

user32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 512B - Virtual size: 440B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 512B - Virtual size: 440B