6f704aaa9618c9933bfd47b516229ccccb326bf7801b991b65b375803830b439N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

6f704aaa9618c9933bfd47b516229ccccb326bf7801b991b65b375803830b439N.exe
Size

218KB
MD5

a5a18f589eb748c8b6d07b25e5a66d60
SHA1

cb6c67116ac10d86b08e54dc2a729a6178a9566b
SHA256

6f704aaa9618c9933bfd47b516229ccccb326bf7801b991b65b375803830b439
SHA512

c1080c9feb7bad2e9339b8c6d19ef619f88a78b93718c2de2d780f5cfc26e326ed075fca25e0e37e0e6b226113476c26a7f21471cf1b2855a86022877b10f453
SSDEEP

6144:YEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwIC:YEGDdQNHEwWlMxYG/wI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f704aaa9618c9933bfd47b516229ccccb326bf7801b991b65b375803830b439N.exe

Files

6f704aaa9618c9933bfd47b516229ccccb326bf7801b991b65b375803830b439N.exe
.exe windows:4 windows x86 arch:x86

2e5df9fb7e893bd2efa286b6326edce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
EnumCalendarInfoA
DisconnectNamedPipe
MoveFileA
lstrcpyn
GetCommandLineA
GetSystemDirectoryW
GetEnvironmentVariableA
IsBadStringPtrA
FindAtomW
ReadDirectoryChangesW
GetFullPathNameW
GetFileAttributesA
ExitThread
LoadLibraryA
lstrlenA
lstrlen
FindResourceA
FindResourceW
GetTempPathW
GetFullPathNameA
OpenMutexW
SearchPathW
GetProcAddress
EnumTimeFormatsW
GetLocaleInfoW
EnumTimeFormatsA
GetCPInfo
OpenMutexA
GetThreadPriority
LoadResource
CreateFileMappingA
GetNamedPipeInfo
lstrcpynW
CompareStringW
OpenFile
IsBadCodePtr
GetDiskFreeSpaceA
GetTimeFormatW
FindAtomA
GlobalGetAtomNameW
MultiByteToWideChar
CreateMailslotW

user32

LoadMenuIndirectW
GetDC
SetCursorPos
OpenClipboard
CreateAcceleratorTableA
OffsetRect
IsDlgButtonChecked
LoadMenuIndirectA
GetMessageW
WinHelpA
UpdateWindow
IsMenu
GetKeyState
UnregisterClassA
DestroyIcon
ShowWindow
SetFocus
TrackPopupMenuEx

gdi32

GetLogColorSpaceW
EnumFontFamiliesW
CreateICW
OffsetClipRgn
SetRectRgn
SetTextColor
PlayEnhMetaFile
CreateFontIndirectExW
GetOutlineTextMetricsW
GetBrushOrgEx
SetEnhMetaFileBits
StartDocW
GetObjectA

advapi32

RegQueryInfoKeyW
RegOpenKeyExA
RegQueryValueW
RegReplaceKeyW
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegOpenKeyExW
RegReplaceKeyA
RegRestoreKeyW

shell32

SHGetDataFromIDListA
SHGetFileInfoA

shlwapi

StrStrW
SHOpenRegStream2A
StrToIntA
PathParseIconLocationA
PathSkipRootW
StrToIntExA
PathCreateFromUrlA
StrCmpNIW
StrChrNIW
UrlIsOpaqueA

ole32

CoGetCurrentProcess
CLSIDFromString

winmm

midiOutSetVolume
mxd32Message
mmioClose
mciSendStringW
mmioSendMessage
mixerGetLineControlsW
mmTaskBlock

Sections

.ma
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.obptK
Size: 5KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Wv
Size: 2KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UeARA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rddrej
Size: 3KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.roXfGq
Size: 3KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BOJdrg
Size: 3KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IU
Size: 3KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.y
Size: 512B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 109KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kzG
Size: 1KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cMrd
Size: 512B - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e5df9fb7e893bd2efa286b6326edce6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ole32

winmm

Sections

.ma Size: 6KB - Virtual size: 6KB

.obptK Size: 5KB - Virtual size: 197KB

.Wv Size: 2KB - Virtual size: 341KB

.UeARA Size: 9KB - Virtual size: 9KB

.rddrej Size: 3KB - Virtual size: 396KB

.roXfGq Size: 3KB - Virtual size: 458KB

.BOJdrg Size: 3KB - Virtual size: 37KB

.IU Size: 3KB - Virtual size: 473KB

.y Size: 512B - Virtual size: 148KB

.data Size: 109KB - Virtual size: 332KB

.kzG Size: 1KB - Virtual size: 205KB

.cMrd Size: 512B - Virtual size: 162KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 1024B - Virtual size: 634B

.ma
Size: 6KB - Virtual size: 6KB

.obptK
Size: 5KB - Virtual size: 197KB

.Wv
Size: 2KB - Virtual size: 341KB

.UeARA
Size: 9KB - Virtual size: 9KB

.rddrej
Size: 3KB - Virtual size: 396KB

.roXfGq
Size: 3KB - Virtual size: 458KB

.BOJdrg
Size: 3KB - Virtual size: 37KB

.IU
Size: 3KB - Virtual size: 473KB

.y
Size: 512B - Virtual size: 148KB

.data
Size: 109KB - Virtual size: 332KB

.kzG
Size: 1KB - Virtual size: 205KB

.cMrd
Size: 512B - Virtual size: 162KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 1024B - Virtual size: 634B