21dc5d0431ab92895695380fa5203a693a994b437e54733ad88f0c6831f7a566

Sharing

Copy URL

Twitter E-mail

General

Target

21dc5d0431ab92895695380fa5203a693a994b437e54733ad88f0c6831f7a566
Size

55KB
MD5

4de1ca32383ad8ead3004ff16bd26135
SHA1

fae61825957e1aaf43887a11e9ca800c9354d786
SHA256

21dc5d0431ab92895695380fa5203a693a994b437e54733ad88f0c6831f7a566
SHA512

93c319ace83fc616bbdcfa783bb8da5d6409d378ae97203733f90002d7ace8b83c4a2817a5e7c179014170e8039cfbcdcf58c7e0b4f78d0f49767e44a00216e2
SSDEEP

768:ahguDkijSmMsCIdnRs/c4IqMspHOzfJbjK/aC8cKeIZmAgY6tin7DZ:5Uk0SmMIOKqZpHOzfAr8cKeUdgYbn71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21dc5d0431ab92895695380fa5203a693a994b437e54733ad88f0c6831f7a566

Files

21dc5d0431ab92895695380fa5203a693a994b437e54733ad88f0c6831f7a566
.exe windows x86

c55e22ee3c8fc7e678af0cc9d5e147f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc140

ord11343
ord10963
ord8997
ord12115
ord9167
ord2758
ord13677
ord6193
ord12074
ord10986
ord7459
ord2210
ord14514
ord14512
ord4315
ord316
ord4807
ord5826
ord13584
ord8026
ord8031
ord4870
ord4468
ord13405
ord2992
ord2394
ord321
ord5406
ord2241
ord6200
ord501
ord1141
ord4085
ord6290
ord5155
ord13278
ord1526
ord1529
ord2251
ord3799
ord3808
ord3688
ord14421
ord1000
ord12163
ord2759
ord13681
ord6195
ord6814
ord3253
ord3358
ord8034
ord4230
ord1451
ord9095
ord7607
ord14513
ord13798
ord8429
ord12205
ord1468
ord8347
ord12190
ord10383
ord12869
ord12806
ord4580
ord8285
ord5336
ord2484
ord12485
ord12484
ord14509
ord7886
ord14507
ord9353
ord4143
ord4082
ord12888
ord7905
ord2027
ord11928
ord11927
ord14380
ord12474
ord7964
ord14581
ord10421
ord14583
ord6324
ord14582
ord6323
ord993
ord6831
ord3844
ord5894
ord12182
ord8180
ord12194
ord12162
ord1109
ord4084
ord5228
ord5528
ord5739
ord9305
ord5504
ord5742
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord12201
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord8713
ord6848
ord8134
ord5404
ord2764
ord10202
ord9166
ord1044
ord310
ord11663
ord14149
ord14048
ord8776
ord13628
ord5911
ord5401
ord2680
ord12067
ord3933
ord3363
ord3364
ord3258
ord12111
ord3689
ord458
ord8705
ord3395
ord3396
ord3159
ord4218
ord6505
ord3298
ord3295
ord10207
ord8173
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord14291
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord3825
ord11881
ord2524
ord4869
ord14502
ord8922
ord6947
ord10950
ord9213
ord3924
ord6322
ord6581
ord3259
ord1389
ord7618
ord890
ord265
ord1509
ord13407
ord1507
ord2407

kernel32

OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
OpenMutexA
FormatMessageA
LocalFree
LocalLock
GetProcAddress
GetModuleHandleA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
CreateProcessA
CreateRemoteThread
CreateThread
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
GetLastError
CloseHandle

user32

CreateWindowExA
MessageBoxA
EnumWindows
GetClassNameA
GetWindowThreadProcessId
DefWindowProcA
IsIconic
EnableWindow
GetSystemMetrics
LoadMenuW
GetSubMenu
DrawIcon
SetForegroundWindow
WaitForInputIdle
SendMessageA
DispatchMessageA
TranslateMessage
RegisterClassA
RegisterWindowMessageA
GetMessageA
GetClientRect
GetParent
LoadIconW
GetCursorPos
GetWindowRect

shell32

Shell_NotifyIconA
ShellExecuteA

bbloader

SetFilter
SetTargetPid
SetFilterState
GetFilterState
SetClientHwnd

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
memmove
__current_exception
__current_exception_context
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_controlfp_s
terminate
_beginthread
_register_thread_local_exe_atexit_callback
_c_exit
_endthread
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_setmbcp
_configthreadlocale

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c55e22ee3c8fc7e678af0cc9d5e147f4

Headers

DLL Characteristics

File Characteristics

Imports

mfc140

kernel32

user32

shell32

bbloader

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 120KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 120KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 4KB