6e8ae1751bbee8d3db226d8c3dc3683b874019f7cb67b546f45e16333043abff

General

Target

6e8ae1751bbee8d3db226d8c3dc3683b874019f7cb67b546f45e16333043abff
Size

24KB
MD5

06642c177edda9fdd607e1f6f8679065
SHA1

96f148dbc17e195832d1abc4c505807d1a8798a1
SHA256

6e8ae1751bbee8d3db226d8c3dc3683b874019f7cb67b546f45e16333043abff
SHA512

85e16ce228b39099b6da56f3142b252813f7de4cab3a62bae11de57f8206da818d2dc4c72b9a3e140148f9e75f82a0f07cf14f9959b25760f07e2a115c2e5c2f
SSDEEP

384:qytbeSasdkBKuZu/snjycBghtrYh8eknggMl4gKg67WhtrjHqC3V5p902CeL:FvmBjHgTsfkngjjjHV5p90QL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e8ae1751bbee8d3db226d8c3dc3683b874019f7cb67b546f45e16333043abff

Files

6e8ae1751bbee8d3db226d8c3dc3683b874019f7cb67b546f45e16333043abff
.exe windows:5 windows x64 arch:x64

8571caa1c1e39e800cb623f4b1d233d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr90

__dllonexit
_unlock
_onexit
_decode_pointer
?terminate@@YAXXZ
__set_app_type
_encode_pointer
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_amsg_exit
realloc
bsearch
qsort
memcpy
memset
setbuf
getenv
atoi
malloc
free
_snprintf
strncmp
strrchr
__iob_func
fprintf
_lock
strncpy
_stricmp
_strdup

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
HeapAlloc
IsBadReadPtr
SetLastError
GetProcessHeap
HeapFree
VirtualFree
VirtualProtect
VirtualAlloc
FreeLibrary
GetModuleHandleA
OutputDebugStringA
GetFullPathNameA
LoadLibraryA
GetProcAddress
UnmapViewOfFile
CreateFileA
GetFileSize
CreateFileMappingA
CloseHandle
MapViewOfFile
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
GetLastError
FormatMessageA
LocalFree
GetSystemTimeAsFileTime

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8571caa1c1e39e800cb623f4b1d233d9

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 5KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 5KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB