6526da0e35160c1d2b4df7cc169b61cdf467c8e85b36cdf018ac0ae8868d163a

Sharing

Copy URL

Twitter E-mail

General

Target

6526da0e35160c1d2b4df7cc169b61cdf467c8e85b36cdf018ac0ae8868d163a
Size

2.5MB
MD5

5a4da021525350420515e62ed042acd7
SHA1

203663649fa8c493325ff4009b6d4723adc1a991
SHA256

6526da0e35160c1d2b4df7cc169b61cdf467c8e85b36cdf018ac0ae8868d163a
SHA512

0be6ba992fc806a64b3a9101ee4414090f97b1765f12928de628c637183aee2ce49196b5d1fb29274c569ff71666b5276a1edc8e9db8f1da69d418d6c98df577
SSDEEP

49152:vkinoOAAXoeoEbi+tHbE7snpe6YD6Zi1QjWdbkXa6BLLpDma0o:vkioTA4eoEOyRnU6a5WykRvDmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6526da0e35160c1d2b4df7cc169b61cdf467c8e85b36cdf018ac0ae8868d163a

Files

6526da0e35160c1d2b4df7cc169b61cdf467c8e85b36cdf018ac0ae8868d163a
.exe windows:6 windows x86 arch:x86

b04df30c44974b774a29da00f304909d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetVersion
IsProcessorFeaturePresent
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
WaitForSingleObject
CreateEventW
GetLastError
SetEvent
CloseHandle
ResetEvent
CreateSemaphoreW
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
FormatMessageW
LocalFree
CreateFileW
SetFileTime
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
SetLastError
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetFileInformationByHandle
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetFileAttributesW
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetCurrentProcess
GetProcessAffinityMask
GetSystemInfo
GlobalMemoryStatus
GetStdHandle
Sleep
GetVersionExW
GetCommandLineW
CreateProcessW
GetExitCodeProcess
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
GetProcessHeap
GetStringTypeW
GetFileType
SetStdHandle
DecodePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread

user32

DestroyWindow
LoadIconW
EndDialog
KillTimer
SetTimer
PostMessageW
SendMessageW
SetWindowTextW
MessageBoxW
LoadStringW
DialogBoxParamW
GetDlgItem
GetWindowLongW
SetWindowLongW
ShowWindow
CharUpperW

shell32

ShellExecuteExW

oleaut32

VariantClear
SysAllocStringLen
SysStringLen

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b04df30c44974b774a29da00f304909d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

oleaut32

Sections

.text Size: 166KB - Virtual size: 165KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 5KB - Virtual size: 16KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 166KB - Virtual size: 165KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 5KB - Virtual size: 16KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 10KB - Virtual size: 9KB