c6c5b6f4c522f4b545c92e64a87464ad08b7c050be4bd2e014f0989b9c273857

Sharing

Copy URL

Twitter E-mail

General

Target

c6c5b6f4c522f4b545c92e64a87464ad08b7c050be4bd2e014f0989b9c273857
Size

208KB
MD5

e2832d5706ead3c58ab025c008dd5577
SHA1

4b47871092c958254fe545bf16425f0335f86035
SHA256

c6c5b6f4c522f4b545c92e64a87464ad08b7c050be4bd2e014f0989b9c273857
SHA512

7c67cfd8a9145f24ff46b9771162e30354d897e04ea670208e63575e01e4058ff8ccff77bfc42acbb7e6c9cc603c1337233e1a298e32eb55621b32fe5b99e66f
SSDEEP

6144:gZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5O:uquCuygMQjd5vJIBP1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6c5b6f4c522f4b545c92e64a87464ad08b7c050be4bd2e014f0989b9c273857

Files

c6c5b6f4c522f4b545c92e64a87464ad08b7c050be4bd2e014f0989b9c273857
.exe windows:4 windows x86 arch:x86

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA

user32

GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor

gdi32

CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx

advapi32

RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey

shlwapi

StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW

opengl32

glReadBuffer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PwM
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OwvyT
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MTxF
Size: 1KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XWRUxX
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YCYo
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tKhtUt
Size: 2KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

opengl32

Sections

.text Size: 12KB - Virtual size: 11KB

.PwM Size: 1KB - Virtual size: 10KB

.OwvyT Size: 3KB - Virtual size: 26KB

.MTxF Size: 1KB - Virtual size: 37KB

.XWRUxX Size: 1KB - Virtual size: 40KB

.data Size: 11KB - Virtual size: 11KB

.YCYo Size: 1KB - Virtual size: 8KB

.tKhtUt Size: 2KB - Virtual size: 221KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.PwM
Size: 1KB - Virtual size: 10KB

.OwvyT
Size: 3KB - Virtual size: 26KB

.MTxF
Size: 1KB - Virtual size: 37KB

.XWRUxX
Size: 1KB - Virtual size: 40KB

.data
Size: 11KB - Virtual size: 11KB

.YCYo
Size: 1KB - Virtual size: 8KB

.tKhtUt
Size: 2KB - Virtual size: 221KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB