a364774a94d20cd6628fb868a97daccab808be2e5698a2b8aa16f27510774fc1

Sharing

Copy URL Twitter E-mail

General

Target

a364774a94d20cd6628fb868a97daccab808be2e5698a2b8aa16f27510774fc1
Size

1.5MB
MD5

ae387d5111555f49deb6b5c6a2092536
SHA1

cfac523a1162690bc69937a5d99eaa526b0a9838
SHA256

a364774a94d20cd6628fb868a97daccab808be2e5698a2b8aa16f27510774fc1
SHA512

26b8c3a8e3597d9885801ae9c4cd968be9d509ccaad8576f0bb27f614520b4ffc06cc1b600b7f6c8ada3adf925b145e1f2f1130454c70444362f0816c9371982
SSDEEP

24576:KTcWPT5s4ZLjsZj1AeqD6eFTxC7UqiF93Q5vmjSprdn2RqZ:LgxZLE2eU9FZqibQ5v6E2y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a364774a94d20cd6628fb868a97daccab808be2e5698a2b8aa16f27510774fc1

Files

a364774a94d20cd6628fb868a97daccab808be2e5698a2b8aa16f27510774fc1
.exe windows x86

7dc7ecb8a9d02626441abd0962dd9a7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
WritePrivateProfileStringW
GetModuleFileNameW
GetPrivateProfileSectionNamesW
FindFirstFileW
FindClose
OpenProcess
ReadProcessMemory
K32GetModuleFileNameExW
GetFileAttributesW
GetPrivateProfileIntW
GetPrivateProfileStringW
Process32NextW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
CreateEventW
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CloseHandle
GetLastError
CreateToolhelp32Snapshot
GetCurrentProcess
DeleteCriticalSection
QueryPerformanceCounter
FreeLibrary
GetProcAddress
OutputDebugStringW
LoadLibraryW

user32

IsWindowVisible
GetMenuItemCount
CreatePopupMenu
TrackPopupMenu
SetClassLongW
SetTimer
DestroyMenu
GetMenuStringW
CheckMenuItem
AppendMenuW
KillTimer
PostQuitMessage
SetForegroundWindow
InvalidateRect
EnableWindow
GetMenu
GetMenuItemID
CheckMenuRadioItem
GetMenuState
CloseWindow
GetMessageW
ScreenToClient
GetCursorPos
GetWindowRect
DestroyWindow
SetWindowPos
SendMessageW
GetSystemMetrics
SetWindowTextW
ShowWindow
IsWindow
MoveWindow
SetCapture
UpdateWindow
GetClientRect
ReleaseCapture
SetWindowLongW
DefWindowProcW
GetWindowLongW
DispatchMessageW
IsDialogMessageW
LoadCursorW
LoadIconW
RegisterClassExW
CreateWindowExW
EndPaint
BeginPaint
TranslateMessage

gdi32

BitBlt
CreateCompatibleBitmap
SetPixel
DeleteDC
SelectObject
DeleteObject
CreateFontW
CreateCompatibleDC

comdlg32

GetOpenFileNameW

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken

shell32

DragFinish
Shell_NotifyIconW
DragQueryFileW

msvcp140

?_Xlength_error@std@@YAXPBD@Z

comctl32

InitCommonControlsEx
CreateStatusWindowW

gdiplus

GdipSetPenCustomEndCap
GdipSetInterpolationMode
GdipCreatePath
GdipSetWorldTransform
GdipSetSmoothingMode
GdipDisposeImage
GdipCreateMatrix
GdipDrawLine
GdipCreateAdjustableArrowCap
GdipSetPenEndCap
GdipSetPenCustomStartCap
GdipRotateMatrix
GdipCloneImage
GdipReleaseDC
GdipGetImageHeight
GdipResetWorldTransform
GdipTranslateMatrix
GdipDeletePath
GdipSetTextRenderingHint
GdipCreateCustomLineCap
GdipScaleWorldTransform
GdipFillRectangle
GdipAddPathLineI
GdipDeleteCustomLineCap
GdipFillEllipseI
GdipDrawEllipse
GdipMeasureString
GdipGetImageGraphicsContext
GdipClosePathFigure
GdipDrawImage
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipDeleteMatrix
GdiplusStartup
GdiplusShutdown
GdipDeleteFontFamily
GdipDrawRectangleI
GdipCreateFontFamilyFromName
GdipDeleteBrush
GdipAlloc
GdipCreateLineBrushFromRectI
GdipCreateFont
GdipCreateSolidFill
GdipFree
GdipDrawString
GdipCreateFromHDC
GdipCloneBrush
GdipFillRectangleI
GdipDeleteGraphics
GdipDeleteFont
GdipDeletePen
GdipCreatePen1

vcruntime140

memcpy
memmove
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
wcsrchr
__current_exception
__current_exception_context
_except_handler4_common
_CxxThrowException
memset

api-ms-win-crt-runtime-l1-1-0

_controlfp_s
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
terminate
_configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s
_set_fmode
__p__commode
__stdio_common_vswprintf_s

api-ms-win-crt-string-l1-1-0

wcsncpy_s
wcsnlen
wcscat_s
wcstok_s

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
_callnewh
free

api-ms-win-crt-convert-l1-1-0

_wtol
_itow_s

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 856KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dc7ecb8a9d02626441abd0962dd9a7b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

msvcp140

comctl32

gdiplus

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

msvcrt

iphlpapi

psapi

Sections

.text Size: 420KB - Virtual size: 420KB

.sedata Size: 856KB - Virtual size: 856KB

.idata Size: 5KB - Virtual size: 8KB

.rsrc Size: 260KB - Virtual size: 260KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 420KB - Virtual size: 420KB

.sedata
Size: 856KB - Virtual size: 856KB

.idata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 260KB - Virtual size: 260KB

.sedata
Size: 4KB - Virtual size: 4KB