4fb6717b14cf7bc91573a3a234aef52f3ff7ba8be068df6b15973dd80ac8d16b

Sharing

Copy URL Twitter E-mail

General

Target

4fb6717b14cf7bc91573a3a234aef52f3ff7ba8be068df6b15973dd80ac8d16b
Size

1.0MB
MD5

ad54b242b0f3905b74d53bab918aaa3f
SHA1

d39bc6b2306e17240a92f31eb6d92b564910897a
SHA256

4fb6717b14cf7bc91573a3a234aef52f3ff7ba8be068df6b15973dd80ac8d16b
SHA512

2a598d6bff375a2b327b90110001d438b84648f9b38bd409fa384836a2263471f85efc3611ba74cd0e9945615f48dc2df63b2af92f98f08c79fed6fcfe9a6daa
SSDEEP

24576:kSVoSF1tHi3rW7da3NLuzRLJu03sNJ4GuZ4tkt6fD5Im9NbXw/hof8i3J/wyVaYO:9uMzwd8hXyVa2QQbElka1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fb6717b14cf7bc91573a3a234aef52f3ff7ba8be068df6b15973dd80ac8d16b

Files

4fb6717b14cf7bc91573a3a234aef52f3ff7ba8be068df6b15973dd80ac8d16b
.exe windows x86

2f2f43e72645eba4475bea40672b12b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
RemoveDirectoryW
FindNextFileW
SetLastError
GetFullPathNameW
FindFirstFileW
FindClose
MultiByteToWideChar
lstrcpyW
GetLocalTime
CreateMutexW
GetLastError
Process32NextW
Process32FirstW
CreateEventW
GetExitCodeThread
SetEvent
WaitForSingleObject
LoadLibraryW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetLogicalDrives
WriteFile
FreeResource
GetProcAddress
GetCommandLineW
MoveFileExW
CreateToolhelp32Snapshot
Module32FirstW
GetCurrentProcessId
CreateFileW
DeviceIoControl
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
SetConsoleCtrlHandler
LoadLibraryA
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
GetStartupInfoA
GetStdHandle
CloseHandle
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
SetUnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetCurrentThread
FatalAppExitA
HeapSize
TerminateProcess
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
ExitThread
CreateThread
RaiseException
HeapReAlloc
WideCharToMultiByte
RtlUnwind
LoadLibraryExW
SystemTimeToFileTime
LocalFileTimeToFileTime
TlsGetValue
OpenThread
TlsSetValue
GetEnvironmentVariableW
GetProcessHeap
HeapAlloc
TlsAlloc
SetEnvironmentVariableW
ReleaseMutex
TlsFree
HeapFree
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
SetFilePointer
ReadFile
GetFileType
FormatMessageW
GetSystemTime
LocalFree
FreeLibrary
GetSystemTimeAsFileTime
CreateFileA
MulDiv
GetTickCount
FindResourceW
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetDiskFreeSpaceExW
GetSystemDirectoryW
GetTempFileNameW
DeleteFileW
GetLogicalDriveStringsW
InterlockedDecrement
GetDriveTypeW
VirtualProtect
lstrlenA
OutputDebugStringW
DebugBreak
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetTempPathW
InterlockedIncrement
Sleep
GetVersionExW
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
GetModuleFileNameW
lstrlenW
SetHandleCount

user32

IsWindow
MessageBoxW
DestroyWindow
IsIconic
wvsprintfW
CharNextW
SendMessageW
ShowWindow
SetWindowPos
CreateDialogParamW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
GetClassInfoExW
RegisterClassExW
DefWindowProcW
LoadCursorW
SetWindowLongW
SetScrollRange
GetDlgItem
MoveWindow
CopyRect
ClientToScreen
AdjustWindowRectEx
GetDlgCtrlID
FindWindowExW
GetWindowThreadProcessId
FindWindowW
IsRectEmpty
GetFocus
CharUpperW
GetDesktopWindow
UpdateLayeredWindow
GetWindowDC
EnableWindow
SetCursor
InflateRect
GetWindowLongW
GetWindowTextW
IsWindowEnabled
EndDialog
GetActiveWindow
DialogBoxParamW
SetRect
UpdateWindow
GetScrollInfo
ReleaseCapture
SetCapture
OffsetRect
SetScrollPos
PtInRect
CallWindowProcW
UnionRect
IntersectRect
FillRect
DrawTextW
InvalidateRect
BringWindowToTop
LoadIconW
SetTimer
KillTimer
ScreenToClient
GetParent
GetWindow
SystemParametersInfoW
PostQuitMessage
MapWindowPoints
SetWindowTextW
GetSystemMetrics
LoadImageW
GetClassNameW
IsDialogMessageW
RedrawWindow
BeginPaint
EndPaint
IsWindowVisible
PostMessageW
SetWindowRgn
CreateWindowExW
wsprintfW
LoadBitmapW
GetWindowRect
GetCursorPos
GetDC
ReleaseDC
GetClientRect
SetFocus

gdi32

CreateFontIndirectW
GetDeviceCaps
SetBkMode
GetClipBox
GetStockObject
SetTextColor
SaveDC
OffsetViewportOrgEx
GetTextExtentPoint32W
CreateRectRgn
CreatePolygonRgn
CombineRgn
GetTextMetricsW
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
CreatePatternBrush
DeleteDC
DeleteObject
SetViewportOrgEx
StretchBlt
CreateFontW
GetTextExtentPointA
GetTextMetricsA
EnumFontFamiliesW
CreateDIBSection
RestoreDC

advapi32

RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW

shell32

SHCreateDirectoryExW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHAppBarMessage
Shell_NotifyIconW
ord165
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoInitialize
CoUninitialize
CLSIDFromProgID
CoCreateInstance
CreateStreamOnHGlobal
CoCreateGuid
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx

oleaut32

VariantClear
SysFreeString
SysAllocString

comctl32

_TrackMouseEvent
InitCommonControlsEx

msimg32

AlphaBlend
TransparentBlt

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdiplus

GdipGetGenericFontFamilySansSerif

wininet

InternetGetConnectedState
HttpQueryInfoW
HttpOpenRequestW
InternetCloseHandle
InternetOpenW
InternetConnectW
HttpSendRequestW

iphlpapi

GetIpAddrTable
GetAdaptersInfo

setupapi

SetupIterateCabinetW

shlwapi

SHGetValueA
StrToIntExW
StrCmpW
PathIsPrefixW
PathFindFileNameW
PathAppendW
PathIsRelativeW
PathRemoveFileSpecW
SHGetValueW
wnsprintfW
PathCombineW
PathFileExistsW
SHSetValueA

netapi32

Netbios

Sections

.text
Size: 356KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rqtouio
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f2f43e72645eba4475bea40672b12b2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

version

gdiplus

wininet

iphlpapi

setupapi

shlwapi

netapi32

Sections

.text Size: 356KB - Virtual size: 352KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 28KB - Virtual size: 36KB

.rsrc Size: 644KB - Virtual size: 644KB

rqtouio Size: - Virtual size: 4KB

.text
Size: 356KB - Virtual size: 352KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 28KB - Virtual size: 36KB

.rsrc
Size: 644KB - Virtual size: 644KB

rqtouio
Size: - Virtual size: 4KB