cb47bc35c65c244a2f535636cc15d5e8480bbce7069a7c33580c1194e4077454N

Sharing

Copy URL Twitter E-mail

General

Target

cb47bc35c65c244a2f535636cc15d5e8480bbce7069a7c33580c1194e4077454N
Size

64KB
MD5

0fba1f7c50f0d4f2da63070132193120
SHA1

96a42c5e8abfe2d43e134443d12235a32d09917f
SHA256

cb47bc35c65c244a2f535636cc15d5e8480bbce7069a7c33580c1194e4077454
SHA512

0771b8cec714b0c06c399bddd31054650704a2cd76fc0fc6d0d983f7cbe4734ee375fee9cee7e9f4c3f2aa50fd58c9964d478cf5318e3d035165dafefcd1385d
SSDEEP

1536:PCUBSz6rMnsDVX3ItptptptptgtptX3ItptptptptmtX3u3h3Ia:PNS+7DVXTt+Rv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb47bc35c65c244a2f535636cc15d5e8480bbce7069a7c33580c1194e4077454N

Files

cb47bc35c65c244a2f535636cc15d5e8480bbce7069a7c33580c1194e4077454N
.exe .vbs windows:5 windows x86 arch:x86 polyglot

6cbf506ed19d3b48b18bb7933794c9ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

b

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
strlen
_XcptFilter
_exit
strtok
strchr
strncmp
memmove
strncpy
_snprintf
malloc
strcat
fopen
strcpy
fprintf
fclose
fseek
ftell
strcmp
srand
sprintf
rand
isalpha
isdigit
memcpy
strstr
memset

ws2_32

select
recv
send
WSAStartup
inet_addr
htons
socket
connect
WSACleanup
gethostbyname
closesocket

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

urlmon

URLDownloadToFileA

shlwapi

PathFileExistsA
PathFindFileNameA

kernel32

SetCurrentDirectoryA
GetFullPathNameA
GetModuleFileNameA
GetLogicalDriveStringsA
GetDriveTypeA
SetErrorMode
GetVolumeInformationA
SetFileAttributesA
CreateDirectoryA
CopyFileA
FindFirstFileA
GetFileAttributesA
FindNextFileA
FindClose
MultiByteToWideChar
GetTickCount
GetTempPathA
GlobalFree
DeleteFileA
ExitProcess
Sleep
ExitThread
GlobalLock
GlobalUnlock
CreateFileA
DeviceIoControl
CloseHandle
CreateFileMappingA
SetFilePointer
GetFileSize
CreateProcessA
GetLastError
ExpandEnvironmentStringsA
GetLocaleInfoA
UnmapViewOfFile
lstrlenA
WriteFile
GlobalAlloc
GetStartupInfoA
GetModuleHandleA
GetSystemTime
ReadFile
CreateMutexA
CreateThread
WaitForSingleObject
MapViewOfFile

user32

FindWindowA
CharLowerA
wsprintfA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
CharLowerBuffA

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

shell32

SHGetFolderPathA
ord680
ShellExecuteA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cbf506ed19d3b48b18bb7933794c9ae

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ws2_32

wininet

urlmon

shlwapi

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB