9a6d18c3115de334a509d70d9f4a652631554141143b7c5557141d8e2b726bc2

Sharing

Copy URL Twitter E-mail

General

Target

9a6d18c3115de334a509d70d9f4a652631554141143b7c5557141d8e2b726bc2
Size

156KB
MD5

fa1bc45ee29b55496e2d8977a36eaba3
SHA1

45fe87c75d35ad3ae572ba2774bed8a7ad8dd942
SHA256

9a6d18c3115de334a509d70d9f4a652631554141143b7c5557141d8e2b726bc2
SHA512

1feaf317a4f7bfe5ea16aa3b2db62491d3a931cdb0e2d9a365bdc30bb87660307c1a793a5f2fa5c87d360b78bb72b3fbcfdc7c2a77a708350485fafd65891955
SSDEEP

768:j3aUhfuBC70bdmtQfvjNtdja5jYsasqfplLIhUVjd7jD4yh:j3p8mtC7NHJsAfLIhUXz4yh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a6d18c3115de334a509d70d9f4a652631554141143b7c5557141d8e2b726bc2

Files

9a6d18c3115de334a509d70d9f4a652631554141143b7c5557141d8e2b726bc2
.exe windows:4 windows x86 arch:x86

155599fe774cd79e09151bc06107e021

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateProcessA
GetSystemDirectoryA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
WriteFile
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
CloseHandle
lstrlenA
GetComputerNameA
GetACP
GetTickCount
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
CreateDirectoryA
HeapFree
HeapAlloc
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree

user32

EndPaint
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
PostQuitMessage
LoadAcceleratorsA
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
LoadStringA
CreateWindowExA
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
wsprintfA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

wininet

InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

155599fe774cd79e09151bc06107e021

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 112KB - Virtual size: 132KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 112KB - Virtual size: 132KB