81a8a728a26439000ac15c8ad13d4a875369b77b6c1c6af895464ab0616d7153

Sharing

Copy URL Twitter E-mail

General

Target

81a8a728a26439000ac15c8ad13d4a875369b77b6c1c6af895464ab0616d7153
Size

55KB
MD5

78c2648cc7b0245bd2aa32c89c8cc2ad
SHA1

4f6ce211be2006dc7ff113df72454cd1f4fda93c
SHA256

81a8a728a26439000ac15c8ad13d4a875369b77b6c1c6af895464ab0616d7153
SHA512

be5c79072b17b696ee9e0c90be7272d063129dec3de29353e4bf3a96b1dc01e7ba95b04c2ddfc1564fa7cbe165a2a72fdb75a1b997132c81d031e488e3ad00ff
SSDEEP

768:c3x7ekiejqLR+EMcdNITV94uk+ItVTdIPWVjsPVgVDlPP7UBmkQsJgQ6tiXAPgS:8KkbqHNCY+InTdIPhoD1PcJQsuQbXAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81a8a728a26439000ac15c8ad13d4a875369b77b6c1c6af895464ab0616d7153

Files

81a8a728a26439000ac15c8ad13d4a875369b77b6c1c6af895464ab0616d7153
.exe windows x86

643cbd0802b2c119f68de69264646e6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc140

ord458
ord10421
ord11343
ord10963
ord8997
ord12115
ord9167
ord2758
ord13677
ord6193
ord12074
ord10986
ord7459
ord2210
ord14514
ord14512
ord4315
ord316
ord4807
ord5826
ord13584
ord8026
ord8031
ord4870
ord4468
ord13405
ord2992
ord2394
ord321
ord310
ord13407
ord6200
ord501
ord1141
ord4085
ord6290
ord5155
ord13278
ord1526
ord1529
ord2251
ord3799
ord3808
ord3688
ord14421
ord1000
ord12163
ord2759
ord13681
ord6195
ord6814
ord3253
ord3358
ord8034
ord4230
ord1451
ord9095
ord7607
ord14513
ord1739
ord8429
ord7618
ord1468
ord8347
ord12190
ord10383
ord12869
ord12806
ord4580
ord8285
ord5336
ord2484
ord12485
ord12484
ord14509
ord7886
ord14507
ord9353
ord4143
ord4082
ord12888
ord7905
ord2027
ord11928
ord11927
ord14380
ord12474
ord3395
ord14581
ord6322
ord14583
ord6324
ord14582
ord6323
ord993
ord6831
ord3844
ord5894
ord12182
ord8180
ord12194
ord12162
ord1109
ord4084
ord5228
ord5528
ord5739
ord9305
ord5504
ord5742
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord8713
ord6848
ord8134
ord5404
ord2764
ord11663
ord14149
ord14048
ord5388
ord8182
ord10202
ord9166
ord8776
ord13628
ord5911
ord5401
ord2680
ord12067
ord3933
ord3363
ord3364
ord3258
ord12111
ord3689
ord8705
ord4218
ord14291
ord3396
ord2524
ord3159
ord6505
ord3298
ord4869
ord3295
ord10207
ord8173
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord3825
ord11881
ord14502
ord8922
ord6947
ord3924
ord6581
ord10950
ord9213
ord3259
ord13798
ord12205
ord1389
ord12201
ord890
ord7964
ord2241
ord1717
ord1044
ord265
ord1509
ord5406
ord1507
ord2407

kernel32

OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
FormatMessageA
LocalFree
LocalLock
GetProcAddress
GetModuleHandleA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
CreateRemoteThread
CreateThread
Sleep
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
GetLastError
CloseHandle

user32

CreateWindowExA
MessageBoxA
EnumWindows
GetClassNameA
GetWindowThreadProcessId
DefWindowProcA
IsIconic
EnableWindow
GetSystemMetrics
LoadMenuW
GetSubMenu
DrawIcon
SendMessageA
DispatchMessageA
TranslateMessage
RegisterClassA
GetMessageA
RegisterWindowMessageA
GetClientRect
GetParent
LoadIconW
GetCursorPos
GetWindowRect
SetForegroundWindow

shell32

Shell_NotifyIconA
ShellExecuteA

bbloader

SetFilter
SetTargetPid
SetFilterState
GetFilterState
SetClientHwnd

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
memmove
__current_exception
__current_exception_context
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_controlfp_s
terminate
_beginthread
_register_thread_local_exe_atexit_callback
_c_exit
_endthread
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_setmbcp
_configthreadlocale

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

643cbd0802b2c119f68de69264646e6a

Headers

DLL Characteristics

File Characteristics

Imports

mfc140

kernel32

user32

shell32

bbloader

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 120KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 120KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 4KB