d0264a4bdea719723604e2cb2fb9d1b4b46b82d6b2b808a44184a7af67de5d62

Sharing

Copy URL Twitter E-mail

General

Target

d0264a4bdea719723604e2cb2fb9d1b4b46b82d6b2b808a44184a7af67de5d62
Size

1.1MB
MD5

6c47cb14a303042320e9de3d00d1fa31
SHA1

d28751ef227ab9b03c10c1b105072aa18dcae89e
SHA256

d0264a4bdea719723604e2cb2fb9d1b4b46b82d6b2b808a44184a7af67de5d62
SHA512

4b80c7ecc9b92a25a49035ff1a7e2621765ac3466fe52add0960aa9971f8fa0b9afc4ae259a8542541467714680f8c96578dd7009c1e63b7044ffd3a61982a59
SSDEEP

24576:gBpwfuaBrdY3b1bcP933V45XQpuIEaLQuaaEDC:SqfuaBr3BX0OQ7aEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0264a4bdea719723604e2cb2fb9d1b4b46b82d6b2b808a44184a7af67de5d62

Files

d0264a4bdea719723604e2cb2fb9d1b4b46b82d6b2b808a44184a7af67de5d62
.exe windows x86

15d7bd8ef17ac5476cf86376fb7705bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
FileTimeToLocalFileTime
Sleep
WaitForMultipleObjects
GetTickCount
SetPriorityClass
GetCurrentProcess
lstrlenA
lstrcatA
GetLastError
ReadFile
GetStdHandle
WriteFile
MoveFileW
DeleteFileW
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
SetCurrentDirectoryA
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
CreateDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetShortPathNameA
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetFullPathNameW
SearchPathW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetFileSize
SetFilePointer
GetFileInformationByHandle
SetEndOfFile
CreateFileA
CompareFileTime
FileTimeToSystemTime
EnterCriticalSection
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
GetVersionExA
UnmapViewOfFile
ExpandEnvironmentStringsW
MapViewOfFile
CreateFileMappingA
GetFileSizeEx
GetCommandLineW
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetLocaleInfoA
GetLocaleInfoW
IsValidCodePage
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
HeapReAlloc
FatalAppExitA
ExitProcess
HeapSize
IsDebuggerPresent
TerminateProcess
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
CreateThread
GetCurrentThreadId
GetProcAddress
DeleteCriticalSection
ExitThread
HeapFree
HeapAlloc
RtlUnwind
RaiseException

user32

CharPrevExA
MoveWindow
InvalidateRect
SetFocus
CharToOemA
CharLowerW
CharUpperW
CharLowerA
CharUpperA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
CreateDialogParamA
GetDialogBaseUnits
SystemParametersInfoA
GetDlgCtrlID
GetWindowLongA
SetWindowLongA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
GetWindowTextA
GetWindowTextLengthA
CreateWindowExA
SendMessageW
LoadStringW
LoadStringA
CharPrevA
CharNextA
MessageBoxW
LoadIconA
LoadCursorA
wsprintfA
SetDlgItemTextA
ShowWindow
KillTimer
SetTimer
PostMessageA
ScreenToClient
IsDlgButtonChecked
IsWindow
EndDialog
SendMessageA
GetWindowRect
MapDialogRect
GetDlgItem
SetCursor

gdi32

GetStockObject

shell32

DragFinish
SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
DragQueryFileW
SHGetMalloc
SHGetFileInfoA

ole32

CoInitialize
CoUninitialize

oleaut32

VariantCopy
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString

shlwapi

PathFileExistsW

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15d7bd8ef17ac5476cf86376fb7705bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 247KB - Virtual size: 247KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 9KB - Virtual size: 21KB

.rsrc Size: 119KB - Virtual size: 118KB

.text
Size: 247KB - Virtual size: 247KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 9KB - Virtual size: 21KB

.rsrc
Size: 119KB - Virtual size: 118KB