bc4a8d3bbbfcac2663210bef06d84e7e0f8aab2ba8280c022d8b28fe0c00866d

Sharing

Copy URL

Twitter E-mail

General

Target

bc4a8d3bbbfcac2663210bef06d84e7e0f8aab2ba8280c022d8b28fe0c00866d
Size

500KB
MD5

34d5a8f6abece85b4d02f624b5321a82
SHA1

32791b3da07984a5c8db4c6131dbe0eec674e96e
SHA256

bc4a8d3bbbfcac2663210bef06d84e7e0f8aab2ba8280c022d8b28fe0c00866d
SHA512

7673850ba2fccb7eb4ddf63ee76079e697de0b7e968495d4e47e3322fba396565125e63d258211b949f57013eae89428ec4fa05f23db4c9d40286f1348861f2e
SSDEEP

12288:Df9siAm7TGgJHeoAnBayQUPgIKU/NkktLYuJUdub+xupSkcEsyyNouaajnZWSe0Z:DftTGJoABayQUPgIKU/NkktLYuJUdubW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc4a8d3bbbfcac2663210bef06d84e7e0f8aab2ba8280c022d8b28fe0c00866d

Files

bc4a8d3bbbfcac2663210bef06d84e7e0f8aab2ba8280c022d8b28fe0c00866d
.exe windows x86

f6c39f29bbeb4dc1ac18694883a0c221

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileTime
SetErrorMode
RtlUnwind
RaiseException
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetACP
HeapSize
TlsAlloc
SetUnhandledExceptionFilter
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
GetLastError
LocalFree
MulDiv
GlobalUnlock
InterlockedExchange
GlobalFree
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
SuspendThread
SetThreadPriority
ResumeThread
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
GetFileSize
GetLocalTime
FileTimeToSystemTime
DeleteFileA
WriteFile
SetFileTime
CreateDirectoryA
LocalFileTimeToFileTime
GetCurrentDirectoryA
ReadFile
CloseHandle
CreateFileA
SystemTimeToFileTime
SetFilePointer
CopyFileA
WideCharToMultiByte
GetTickCount
lstrlenA
HeapFree
IsBadReadPtr
SetLastError
VirtualProtect
GetSystemInfo
GetProcessHeap
HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
GetFileAttributesA
GetModuleFileNameA
RemoveDirectoryA
MultiByteToWideChar
FindFirstFileA
MoveFileA
FindNextFileA
FindClose
GetEnvironmentVariableA
SetEvent
WaitForSingleObject
ResetEvent
CreateEventA
GetCurrentProcess
SetFileAttributesA
TerminateProcess
Sleep

user32

ReleaseDC
GetDC
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
EndDialog
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
GetDesktopWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
GetWindowLongA
SetWindowLongA
CreateDialogIndirectParamA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetCapture
GetSysColor
EnableWindow
LoadIconA
GetForegroundWindow
UnregisterClassA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

ord17

ole32

CoCreateInstance
CoInitialize
CoUninitialize

wsock32

WSASetLastError
ioctlsocket
htons
htonl
gethostbyname

wininet

InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile

Sections

.text
Size: 384KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6c39f29bbeb4dc1ac18694883a0c221

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

wsock32

wininet

Sections

.text Size: 384KB - Virtual size: 380KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 20KB - Virtual size: 34KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 384KB - Virtual size: 380KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 32KB - Virtual size: 31KB