32be0a21ab45e4903388216ab4166cbcb70b6846975f4136bc22041b6f2c4172

Sharing

Copy URL

Twitter E-mail

General

Target

32be0a21ab45e4903388216ab4166cbcb70b6846975f4136bc22041b6f2c4172
Size

264KB
MD5

384eb6e93d7835da7ae5fbf05ba470af
SHA1

fb5f15f4a315192be4f2e5c5786e7605bbc02850
SHA256

32be0a21ab45e4903388216ab4166cbcb70b6846975f4136bc22041b6f2c4172
SHA512

601c94047478a1af35c641ce4ee7c1be8fb53f6643608724ef93e074fe4f57753091f3807127ebc1880a008ead1d12711e5f88d658791a153f72840d474ac996
SSDEEP

6144:IBf80Lg70lkurnUGkXEmmNgbJvX6OhwnqFXLv:IBfds70qYnvkXkgbZX6Ohwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32be0a21ab45e4903388216ab4166cbcb70b6846975f4136bc22041b6f2c4172

Files

32be0a21ab45e4903388216ab4166cbcb70b6846975f4136bc22041b6f2c4172
.exe windows x86

1ef160831b6eac2b5f842cd26abcbe11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
LCMapStringA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
LCMapStringW
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindResourceA
SetUnhandledExceptionFilter
VirtualAlloc
ReadFile
lstrcmpA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
GlobalDeleteAtom
GlobalAlloc
CloseHandle
GetVersion
lstrcatA
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
GetProfileStringA
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
GetACP
GetCPInfo
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetVersionExA
GetModuleFileNameA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GlobalFree
CreateFileA
LoadResource
GetCurrentProcess
DuplicateHandle
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
SizeofResource
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetLastError
SetLastError
InterlockedDecrement
GlobalFlags
MulDiv
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
lstrcpyA
lstrcpynA
GlobalGetAtomNameA
GlobalUnlock
GlobalLock
LockResource

user32

SetParent
AppendMenuA
DeleteMenu
GetSystemMenu
SetTimer
KillTimer
SetRect
DestroyCursor
FillRect
GetClassNameA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
InsertMenuA
GetMenuStringA
GetSysColorBrush
LoadStringA
CharUpperA
DestroyIcon
FindWindowA
InflateRect
InvertRect
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
GetDC
ReleaseDC
OffsetRect
IsZoomed
BringWindowToTop
IsIconic
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
ClientToScreen
WindowFromPoint
GetWindowThreadProcessId
GetDesktopWindow
WaitMessage
ReleaseCapture
SetCapture
LoadCursorA
LoadIconA
SystemParametersInfoA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScreenToClient
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
GetTopWindow
WinHelpA
GetClassInfoA
IntersectRect
IsRectEmpty
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
RegisterWindowMessageA
wsprintfA
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SendMessageA
EnableWindow
UpdateWindow
RegisterClassA
PtInRect
GetMenuItemCount
GetCapture
IsChild
GetMenu
SetScrollPos
UnregisterClassA
HideCaret
DrawFocusRect
ShowCaret
ExcludeUpdateRgn
CharNextA
DefDlgProcA
IsWindowUnicode

gdi32

GetObjectA
SelectObject
GetTextMetricsA
DeleteDC
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
PatBlt
GetStockObject
Rectangle
DPtoLP
CreatePen
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateDCA
DeleteObject
CreateFontIndirectA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
CreateBitmap
ScaleWindowExtEx
SetBkColor
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
SetTextColor
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
BitBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
SetWindowExtEx
CreateDIBitmap
GetTextExtentPointA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
PrintDlgA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegQueryValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

shell32

SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ef160831b6eac2b5f842cd26abcbe11

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 178KB - Virtual size: 178KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 16KB - Virtual size: 32KB

.idata Size: 10KB - Virtual size: 9KB

.rsrc Size: 22KB - Virtual size: 21KB

.text
Size: 178KB - Virtual size: 178KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 16KB - Virtual size: 32KB

.idata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 22KB - Virtual size: 21KB