977d1c0defaf0073a0b525313a4a128f3d9c4d44b369388ed0dc96ae8ceb131a

Sharing

Copy URL

Twitter E-mail

General

Target

977d1c0defaf0073a0b525313a4a128f3d9c4d44b369388ed0dc96ae8ceb131a
Size

5.8MB
MD5

6e6c80c7ed29dc3a27b8e6263aa2e440
SHA1

8e86476071b694a3b1d392931cbb57ea45e8f14f
SHA256

977d1c0defaf0073a0b525313a4a128f3d9c4d44b369388ed0dc96ae8ceb131a
SHA512

d55a7fa5551e9080a30c3e21fd0ac0856a999167d6628b372e42a544c35bf0a9ed8568cddfd21ea81c304300f37a91585a9cdc193d07aad7f7c12f26207f2ded
SSDEEP

12288:+Y9yVItQEUy9OzNq9bcD3wxQ2kROClnMFT1FezEFvV3iNgaKiMvDlOCF/3viDFe7:QYQYqWQ29TzvVogBh3KMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
977d1c0defaf0073a0b525313a4a128f3d9c4d44b369388ed0dc96ae8ceb131a

Files

977d1c0defaf0073a0b525313a4a128f3d9c4d44b369388ed0dc96ae8ceb131a
.exe windows x86

8af1322ce860d4f7039f4411b6f9717c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

comctl32

CreateToolbarEx
ord17
ord6
ord2

winmm

waveOutGetNumDevs
PlaySoundA

kernel32

LoadLibraryExA
GetVersionExA
WinExec
CloseHandle
GlobalReAlloc
lstrcpyA
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
InterlockedExchange
EnterCriticalSection
GetModuleHandleA
DeleteCriticalSection
ResumeThread
GetFileSize
GetTimeFormatA
GetDateFormatA
Beep
ReadFile
SetCurrentDirectoryA
lstrcmpiA
GetTickCount
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
TlsAlloc
GetModuleFileNameA
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
InterlockedDecrement
ExitProcess
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LoadLibraryW
RtlUnwind
HeapAlloc
HeapReAlloc
GetStringTypeW
SetStdHandle
WriteConsoleW
IsProcessorFeaturePresent
HeapSize
CreateFileW
LockResource
GetLocalTime
GetPrivateProfileStringA
GlobalFree
GetProcAddress
CreateDirectoryA
FlushFileBuffers
GlobalUnlock
lstrcatA
SizeofResource
GlobalAlloc
WriteFile
GlobalLock
LoadResource
FreeLibrary
lstrlenA
SetFilePointer
lstrcmpA
FindResourceA
CreateFileA
TlsGetValue

user32

DefWindowProcA
EndDialog
GetDlgItem
GetMenuState
TranslateAcceleratorA
EnableMenuItem
ReleaseDC
CreateWindowExA
GetWindowLongA
CharUpperBuffA
InvalidateRect
MessageBoxA
SetWindowLongA
GetAsyncKeyState
GetMenu
GetForegroundWindow
TranslateMessage
IsDialogMessageA
GetDC
RegisterWindowMessageA
SendMessageA
SetFocus
GetClientRect
wsprintfA
CallNextHookEx
LoadIconA
LoadStringA
SetForegroundWindow
GetSubMenu
KillTimer
SendDlgItemMessageA
PostQuitMessage
RegisterClassExA
CreateDialogParamA
GetWindowRect
SetTimer
GetMessageA
SetCursor
DestroyWindow
ClientToScreen
SetWindowsHookExA
CheckRadioButton
DrawMenuBar
IsDlgButtonChecked
RedrawWindow
BeginPaint
SetCapture
EndPaint
SetCaretPos
CreateCaret
GetCursorPos
DestroyCaret
SetScrollPos
SetScrollRange
ShowCaret
CharPrevA
MessageBeep
GetFocus
ScreenToClient
HideCaret
GetSysColor
SetWindowPos
CheckDlgButton
LoadAcceleratorsA
ShowWindow
GetActiveWindow
PostMessageA
DispatchMessageA
UnhookWindowsHookEx
GetSystemMetrics
SetWindowTextA
UpdateWindow
EnableWindow
CallWindowProcA
FindWindowA
LoadCursorA
GetDlgItemTextA
DialogBoxParamA
SetDlgItemTextA
CheckMenuItem
MoveWindow
ReleaseCapture
DestroyCursor

gdi32

EndDoc
StartDocA
SetTextColor
GetDeviceCaps
DeleteDC
StartPage
LineTo
EndPage
MoveToEx
SetBkColor
SelectObject
GetStockObject
CreateDCA
GetTextMetricsA
TextOutA

comdlg32

GetSaveFileNameA
PrintDlgA
GetOpenFileNameA

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA

Sections

.text
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8af1322ce860d4f7039f4411b6f9717c

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 306KB - Virtual size: 306KB

.rdata Size: 74KB - Virtual size: 74KB

.data Size: 54KB - Virtual size: 158KB

.rsrc Size: 5.3MB - Virtual size: 5.3MB

.reloc Size: 59KB - Virtual size: 59KB

.text
Size: 306KB - Virtual size: 306KB

.rdata
Size: 74KB - Virtual size: 74KB

.data
Size: 54KB - Virtual size: 158KB

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

.reloc
Size: 59KB - Virtual size: 59KB