5c6af4f75f939b8be2cf60ea5c7ee3966f6c875c1ac3d0bf239533a89a70ba5f

Sharing

Copy URL

Twitter E-mail

General

Target

5c6af4f75f939b8be2cf60ea5c7ee3966f6c875c1ac3d0bf239533a89a70ba5f
Size

480KB
MD5

e60386eb1697dc0ff9cbd632d35bd3ee
SHA1

1e28b366ad253c49a9e7f8ec377ddb7e3a6385e4
SHA256

5c6af4f75f939b8be2cf60ea5c7ee3966f6c875c1ac3d0bf239533a89a70ba5f
SHA512

0ba6252ece53afb051ce1e6cdeedd3a17e8cf6fd5db5b3c4ad75e1d85e7d4bce2851b4640cb1dd74800362a6d9d8fb41baeb157e0e48ebd853e1e80c30e74638
SSDEEP

12288:ono6RLXo5oM7Z1LCMpMiZ3kLgED3UjKpK:onK5oGuMpd0sED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c6af4f75f939b8be2cf60ea5c7ee3966f6c875c1ac3d0bf239533a89a70ba5f

Files

5c6af4f75f939b8be2cf60ea5c7ee3966f6c875c1ac3d0bf239533a89a70ba5f
.exe windows:5 windows x86 arch:x86

560cea031a428d68c7765ccb5f49f411

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
SetInformationJobObject
SetNamedPipeHandleState
SetThreadContext
SetUnhandledExceptionFilter
Sleep
TerminateProcess
SetFileAttributesA
UnhandledExceptionFilter
WaitForSingleObjectEx
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
ResumeThread
QueryPerformanceCounter
OpenThread
Module32Next
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadLibraryW
GetTimeFormatA
GetTickCount
GetTapeParameters
GetSystemWindowsDirectoryA
GetSystemTimeAsFileTime
GetSystemTimeAdjustment
GetSystemDirectoryW
GetStartupInfoW
GetQueuedCompletionStatus
GetProcAddress
GetPrivateProfileIntW
GetModuleHandleW
GetLastError
GetFileAttributesExA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetConsoleAliasesLengthA
GetCommandLineW
FreeLibrary
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
DosDateTimeToFileTime
DeleteCriticalSection
DebugActiveProcess
CreateThread
CreateProcessW
CreateMailslotA
CreateJobObjectW
CreateIoCompletionPort
CloseHandle
AssignProcessToJobObject
GetModuleHandleA
VirtualAlloc
TerminateThread
CreateFileA

user32

DispatchMessageW
DrawEdge
DrawStateW
DrawTextW
EnableWindow
EndDialog
EndPaint
EnumPropsExA
ExitWindowsEx
GetClassInfoW
GetClassNameA
GetCursorInfo
GetDC
GetDlgItem
GetIconInfo
GetKeyboardLayoutNameA
GetLastActivePopup
GetParent
GetTopWindow
GetWindowRect
GetWindowTextW
IsCharUpperA
IsDialogMessageA
LoadBitmapW
LoadCursorW
LoadIconA
LoadStringW
LockWorkStation
LookupIconIdFromDirectoryEx
MapVirtualKeyW
MenuItemFromPoint
MessageBeep
MessageBoxW
MonitorFromPoint
MsgWaitForMultipleObjects
OemToCharBuffW
OpenDesktopA
PaintDesktop
PeekMessageW
PostMessageA
PostMessageW
RealGetWindowClassW
RegisterWindowMessageW
ReleaseDC
SendMessageW
SendNotifyMessageW
SetCapture
SetCursor
SetKeyboardState
SetMenuDefaultItem
SetThreadDesktop
SetTimer
SetUserObjectInformationA
SetWindowPos
SetWindowTextW
TranslateMessage
WINNLSGetIMEHotkey
DialogBoxParamW
DeleteMenu
DefDlgProcW
DdeSetQualityOfService
DdeQueryStringA
DdeCmpStringHandles
DdeAddData
CreateCaret
CreateAcceleratorTableW
CharNextExA
CascadeChildWindows
CharLowerW
GetClipboardData
LoadCursorFromFileW
DestroyWindow
GetCaretBlinkTime
GetDlgCtrlID
CreatePopupMenu
VkKeyScanA
CharUpperW
GetDesktopWindow
GetListBoxInfo
VkKeyScanW
IsGUIThread
CountClipboardFormats
GetQueueStatus
EndMenu
GetMessagePos
DrawMenuBar
GetMessageExtraInfo
GetWindowTextLengthW
GetProcessWindowStation
GetShellWindow
GetClipboardOwner
GetKeyboardLayout
CharLowerA
GetSystemMetrics
DestroyIcon
IsWindowVisible
OpenIcon
GetSysColor
AnyPopup
GetClipboardViewer
CopyIcon
GetKeyState
CreateMenu
GetActiveWindow
InSendMessage
ReleaseCapture
CloseClipboard
GetMessageTime
GetWindowContextHelpId
EnumClipboardFormats
GetKeyboardType
CharNextA
GetOpenClipboardWindow
DestroyCursor
GetInputState
WindowFromDC
DialogBoxParamA

gdi32

GetBkMode
DeleteMetaFile
CancelDC
EndDoc
GetTextCharacterExtra
CreateSolidBrush
CreateHalftonePalette
CreateFontIndirectW
ExtTextOutW
GetObjectW
GetTextExtentPointW
SelectObject
SetBkColor
GetTextColor
GetLayout
GdiGetBatchLimit
CreateMetaFileA
GetBkColor
SetMetaRgn
BitBlt
SaveDC
DeleteObject
GetStockObject
GetPixelFormat
DeleteDC
DeleteEnhMetaFile
GetSystemPaletteUse
GetEnhMetaFileA
CloseEnhMetaFile
UnrealizeObject
RealizePalette
AbortPath
BeginPath
SwapBuffers
CloseMetaFile
CreateCompatibleDC

advapi32

RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW

shell32

SHGetPathFromIDList
SHGetFileInfoW
SHCreateDirectoryExW
SHBrowseForFolder
ExtractIconExW
DragQueryFileW
DragQueryFileA
DoEnvironmentSubstW
ShellExecuteExW

shlwapi

PathUnquoteSpacesW
StrRChrW
PathGetArgsW
PathAppendW

msvcrt

_XcptFilter
__doserrno
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_close
_controlfp
_eof
_errno
_except_handler3
_exit
_ftol
_initterm
_iob
_lseek
_ltoa
_mkdir
_open
_read
_stat
_strdup
_stricmp
_strnicmp
_tempnam
_unlink
_vsnprintf
_vsnwprintf
_write
atoi
atol
clock
ctime
exit
fclose
fopen
fprintf
fread
free
fwrite
isdigit
malloc
printf
remove
setvbuf
strchr
strncmp
strncpy
strpbrk
strspn
time
tolower
toupper

Sections

.text
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

560cea031a428d68c7765ccb5f49f411

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 231KB - Virtual size: 231KB

.rdata Size: 145KB - Virtual size: 144KB

.data Size: 71KB - Virtual size: 70KB

.rsrc Size: 31KB - Virtual size: 31KB

.text
Size: 231KB - Virtual size: 231KB

.rdata
Size: 145KB - Virtual size: 144KB

.data
Size: 71KB - Virtual size: 70KB

.rsrc
Size: 31KB - Virtual size: 31KB