93c7c591e90ae1f6b0ad5055bf256bec160e840e27a5136de7c8550b02733874

Sharing

Copy URL Twitter E-mail

General

Target

93c7c591e90ae1f6b0ad5055bf256bec160e840e27a5136de7c8550b02733874
Size

196KB
MD5

6788c4321b91affd8930e086979b41b6
SHA1

2472a7ccd410d749560f31b7ed02d901f449d958
SHA256

93c7c591e90ae1f6b0ad5055bf256bec160e840e27a5136de7c8550b02733874
SHA512

ad39e87228b1c21c6b95f19a15ca3422612af158f8779a92013cf6206ea1c6aec8a3f86a6cc133fc3d761c28486dbb735480f6be31e65fda2d96beaccca7687d
SSDEEP

3072:vrxQ4sNmztXyGJI5VGAxGrEyGJI5VGAxGr:VQ4sOJOVfxGYJOVfxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93c7c591e90ae1f6b0ad5055bf256bec160e840e27a5136de7c8550b02733874

Files

93c7c591e90ae1f6b0ad5055bf256bec160e840e27a5136de7c8550b02733874
.exe windows x86

0b54872b0db9c13a8bf65887a61a8c13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetModuleHandleA
CloseHandle
WideCharToMultiByte
CreateFileA
WriteConsoleW
lstrlenA
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
VirtualAlloc
HeapReAlloc
GetConsoleMode
FlushFileBuffers
GetModuleFileNameA
MoveFileExA
RemoveDirectoryA
GetConsoleCP
SetFilePointer
GetLocaleInfoA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
GetConsoleOutputCP
DeleteFileA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy

user32

EndPaint
MessageBoxA
ReleaseDC
BeginPaint
GetDesktopWindow
GetWindowRect
GetDC
DefWindowProcA
PostQuitMessage
SetWindowPos
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
RegisterClassExA
LoadCursorA
LoadIconA
SendMessageA
CreateWindowExA

gdi32

SetStretchBltMode
CreateFontA
DeleteObject

advapi32

RegDeleteValueA

shell32

SHGetSpecialFolderPathA

ole32

OleUninitialize
OleInitialize
CoInitialize
CoUninitialize

comctl32

ord17

gdiplus

GdiplusShutdown
GdiplusStartup

ws2_32

WSACleanup
WSAStartup

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b54872b0db9c13a8bf65887a61a8c13

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

gdiplus

ws2_32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 136KB - Virtual size: 133KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 136KB - Virtual size: 133KB