8579e4e9be74bd7192ceefd409a1a504f63926db6fdd90691b6d6b4ec37c37e2

Sharing

Copy URL Twitter E-mail

General

Target

8579e4e9be74bd7192ceefd409a1a504f63926db6fdd90691b6d6b4ec37c37e2
Size

1.1MB
MD5

a44039f8397ca8015cbb05f2fe0be92f
SHA1

8347f657cf7fcdd50c61b0b18eecdbed6895f98b
SHA256

8579e4e9be74bd7192ceefd409a1a504f63926db6fdd90691b6d6b4ec37c37e2
SHA512

0fa4dc6e62c40600dbc516d9289f1c65fa78cb406592a660908a78f902edad4bb6df0450d8b4c9a80b232dde08c32334a4d2d66d45d27642fb2e3869b4034951
SSDEEP

24576:1laNhskG7L7lzS7NdkiuYc9TLgCvoqCfE:28fpTBo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8579e4e9be74bd7192ceefd409a1a504f63926db6fdd90691b6d6b4ec37c37e2

Files

8579e4e9be74bd7192ceefd409a1a504f63926db6fdd90691b6d6b4ec37c37e2
.exe windows x86

4c4579c6fc4ba418e70a34a91dca693e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrCmpNW
PathRemoveExtensionW
StrCmpIW
PathIsNetworkPathW
PathAddBackslashA
PathStripPathA
PathFindFileNameA
PathFindExtensionW
StrCmpNIW
StrToIntW
PathRemoveFileSpecW
PathStripPathW
StrToIntExW
PathCommonPrefixW
PathIsFileSpecA
PathRemoveBlanksW
PathRemoveBackslashW
PathRemoveBlanksA
PathRemoveBackslashA
PathCombineA
PathAppendW
PathAddBackslashW
PathIsUNCW
PathIsSameRootW
StrChrW
PathFileExistsW
PathCombineW
PathFileExistsA
PathFindFileNameW
PathIsURLW
PathRemoveFileSpecA
PathAppendA

kernel32

FindNextFileA
FreeLibrary
LoadLibraryA
FindFirstFileA
SetThreadPriority
WriteFile
CreateFileA
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
lstrcatA
GlobalUnlock
GlobalLock
GetEnvironmentVariableA
SetPriorityClass
GetCurrentProcess
RemoveDirectoryA
GetLastError
SetEvent
CreateEventA
GetVersion
MulDiv
SystemTimeToFileTime
GetSystemTime
GetStringTypeExA
lstrcmpA
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
LocalFree
LocalAlloc
QueueUserAPC
ReadFile
SetEndOfFile
SetFilePointer
MoveFileA
WaitForMultipleObjects
GetCurrentThread
ResetEvent
LoadLibraryExA
ReleaseSemaphore
CreateSemaphoreA
DuplicateHandle
GetCommandLineW
GetExitCodeThread
WritePrivateProfileStructA
GetPrivateProfileStructA
GetDriveTypeA
GetLogicalDrives
SetCurrentDirectoryA
GetShortPathNameA
GetLocaleInfoA
InterlockedIncrement
GetACP
FindClose
QueryPerformanceCounter
CompareStringA
InterlockedExchange
GetWindowsDirectoryA
GetSystemDirectoryA
SetLastError
GetStartupInfoA
RaiseException
HeapAlloc
GetProcessHeap
GetLocalTime
GlobalFree
GlobalAlloc
LockResource
LoadResource
FindResourceA
GetModuleFileNameA
Sleep
GetTickCount
CreateThread
CloseHandle
WaitForSingleObject
TerminateProcess
OpenProcess
lstrlenA
ExitProcess
GetPrivateProfileIntA
WritePrivateProfileStringA
GetSystemTimeAsFileTime
lstrcpynA
SetEnvironmentVariableA
CreateProcessA
lstrcpyA
GetPrivateProfileStringA
GetTempFileNameA
GetTempPathA
CreateDirectoryA
lstrcmpiA

user32

ModifyMenuA
SetMenuItemInfoA
CheckMenuItem
RemoveMenu
GetMenuItemRect
SystemParametersInfoA
InsertMenuA
DestroyMenu
LoadMenuA
GetMenuItemInfoA
GetMenuItemCount
AppendMenuA
GetMenuStringA
GetSubMenu
GetMenuState
GetMenuItemID
CreatePopupMenu
InsertMenuItemA
IsCharAlphaA
wsprintfA
CheckDlgButton
DialogBoxParamA
LoadStringA
PeekMessageA
GetSystemMetrics
GetForegroundWindow
GetMessageA
DispatchMessageA
GetClassInfoA
RegisterClassA
CreateWindowExA
DefWindowProcA
IsDlgButtonChecked
RegisterClipboardFormatA
WindowFromPoint
CharNextA
CharPrevA
SetWindowRgn
EndDeferWindowPos
BeginDeferWindowPos
DestroyCursor
DestroyIcon
CreateDialogIndirectParamA
GetSysColorBrush
InflateRect
MessageBeep
TranslateAcceleratorA
SetFocus
EnableMenuItem
DeferWindowPos
BringWindowToTop
IsIconic
GetKeyState
FillRect
EndPaint
BeginPaint
GetCapture
GetWindowRgn
KillTimer
SetTimer
IsWindow
FindWindowExA
IsChild
LoadCursorA
SetCursor
ValidateRect
GetUpdateRect
GetUpdateRgn
RedrawWindow
SetCapture
ReleaseCapture
ClientToScreen
GetCursorPos
TrackPopupMenu
SetRect
EnumThreadWindows
IsWindowVisible
UpdateWindow
FindWindowA
MessageBoxA
GetWindowThreadProcessId
SetForegroundWindow
DestroyWindow
GetDlgItemTextA
DrawTextA
GetWindowTextA
SetWindowTextA
CreateDialogParamA
PostMessageA
ScreenToClient
SetParent
SetWindowPos
InvalidateRect
GetWindowRect
EndDialog
GetParent
ShowWindow
SetDlgItemTextA
GetAsyncKeyState
GetClientRect
GetWindowDC
ReleaseDC
LoadImageA
GetDC
SendDlgItemMessageA
GetDlgItem
SendMessageA
CopyRect
EnumDisplaySettingsA
TranslateMessage
IsDialogMessageA
GetClassLongA
MsgWaitForMultipleObjectsEx
GetMessagePos
GetSystemMenu
SetClassLongA
PostQuitMessage
RegisterWindowMessageA
LoadAcceleratorsA
LoadIconA
SendMessageTimeoutA
CharUpperBuffA
DrawIconEx
GetDlgItemInt
SetDlgItemInt
SetCursorPos
DeleteMenu
MapWindowPoints
GetFocus

gdi32

GetDeviceCaps
UpdateColors
SetBkMode
SetTextColor
LineTo
MoveToEx
CombineRgn
OffsetRgn
CreateRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
CreatePolyPolygonRgn
CreatePen
Rectangle
RoundRect
CreateCompatibleBitmap
SetBkColor
CreateCompatibleDC
GetTextColor
CreateFontA
CreateSolidBrush
GetObjectA
FillRgn
GetStockObject
CreateRectRgnIndirect
StretchBlt
GetPixel
SetPixel
CreateBrushIndirect
GetNearestColor
SetStretchBltMode
EnumFontsA
GetTextMetricsA
ExtSelectClipRgn
IntersectClipRect
GetFontLanguageInfo
SelectObject
GetDIBits
GetDIBColorTable
DeleteDC
DeleteObject
RectVisible
CreatePalette
CreateDIBSection
SelectPalette
RealizePalette
GetBkColor
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA

shell32

DragQueryPoint
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
SHAppBarMessage
DragFinish

ole32

CoCreateInstance
RevokeDragDrop
CoRevokeClassObject
CoCreateGuid
OleInitialize
RegisterDragDrop
CoRegisterClassObject
CoInitialize
CoInitializeEx
OleUninitialize
CoUninitialize

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
VariantInit
SafeArrayCreateVector

nscrt

strcmp
_wtoi
_vsnwprintf
wcsstr
malloc
free
_vsnprintf
memset
sqrt
sin
pow
fopen
fread
fclose
strstr
memcpy
strchr
cos
fputc
fprintf
_wfopen
atoi
fgets
??3@YAXPAX@Z
memcmp
memmove
strtol
_wcsdup
toupper
_purecall
__CxxFrameHandler
fwrite
ftell
fseek
wcscmp
fabs
realloc
strncmp
log
_except_handler3
abs
_wchmod
_waccess
_i64tow
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
_strnicmp
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strlen
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_CIpow
fputs
wcschr
_wcsnicmp
_wcsicmp
_stricmp
_strdup
??2@YAPAXI@Z

Sections

.text
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 657KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4c4579c6fc4ba418e70a34a91dca693e

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

nscrt

Sections

.text Size: 394KB - Virtual size: 393KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 8KB - Virtual size: 76KB

.rsrc Size: 657KB - Virtual size: 660KB

.reloc Size: 39KB - Virtual size: 63KB

.text
Size: 394KB - Virtual size: 393KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 8KB - Virtual size: 76KB

.rsrc
Size: 657KB - Virtual size: 660KB

.reloc
Size: 39KB - Virtual size: 63KB