23523d49ba6b351708579fb53ab9f7375715ab28bb20602fc45bdbfdc72f3a5c

Sharing

Copy URL Twitter E-mail

General

Target

23523d49ba6b351708579fb53ab9f7375715ab28bb20602fc45bdbfdc72f3a5c
Size

696KB
MD5

6e057e83915ad972de6bcbc7d91cfb86
SHA1

780771f070861f98be46f555190f7684d9214d61
SHA256

23523d49ba6b351708579fb53ab9f7375715ab28bb20602fc45bdbfdc72f3a5c
SHA512

53dff56b01f108b8db52ab8048d1ce5e5e08050e221a7268be31fb1ef016ec2751cb66945d4ea4f2cffcb12e95e783ce47a5cbf0c28e0220bd47c04d37aa4099
SSDEEP

12288:FkqYVzHZMcC2jj8jVWK65utkAjQJ621ZAgE7:FkqYVz5FC2rdykTxXAR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23523d49ba6b351708579fb53ab9f7375715ab28bb20602fc45bdbfdc72f3a5c

Files

23523d49ba6b351708579fb53ab9f7375715ab28bb20602fc45bdbfdc72f3a5c
.exe windows x86

d5f31375ee3806116668a9d4ce89cc19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send
recv
__WSAFDIsSet
select
WSACleanup
closesocket
shutdown
connect
htons
socket
WSAStartup
gethostbyname
ioctlsocket

setupapi

SetupDiOpenDeviceInterfaceRegKey
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

comctl32

InitCommonControlsEx

kernel32

WriteConsoleA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetConsoleOutputCP
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
WriteConsoleW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcpyA
LoadLibraryA
lstrcatA
GetProcAddress
MultiByteToWideChar
GetACP
FreeLibrary
lstrcmpiA
GetTickCount
GlobalAlloc
CreateFileA
GlobalFree
CreateEventA
CloseHandle
WaitForSingleObject
GetOverlappedResult
ResetEvent
ReadFile
WriteFile
CancelIo
DeviceIoControl
SetEndOfFile
CreateMutexA
GetModuleHandleA
GetSystemDefaultLangID
GetCurrentProcess
GetVersionExA
lstrlenA
MulDiv
GetModuleFileNameA
SetEvent
HeapAlloc
GetProcessHeap
HeapFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
WideCharToMultiByte
LCMapStringA
SetFilePointer
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
ExitProcess
HeapSize
GetStdHandle
SetLastError
TlsFree
TlsSetValue
GetLocaleInfoA
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc

user32

GetFocus
IsDlgButtonChecked
EnableWindow
CheckRadioButton
LoadImageA
ShowWindow
EndDialog
SetDlgItemTextA
GetWindowTextA
SetWindowTextA
GetDlgItem
MoveWindow
GetWindowRect
LoadStringA
DialogBoxParamA
MessageBoxA
wsprintfA
SetTimer
KillTimer
IsCharAlphaA
IsCharAlphaNumericA
SendMessageA
SetFocus

winspool.drv

EnumPrintersA
EnumPortsA
ClosePrinter
GetPrinterDriverA
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5f31375ee3806116668a9d4ce89cc19

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

setupapi

comctl32

kernel32

user32

winspool.drv

advapi32

Sections

.text Size: 159KB - Virtual size: 158KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 270KB - Virtual size: 269KB

.text
Size: 159KB - Virtual size: 158KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 270KB - Virtual size: 269KB