658d4ef4df2744bf8c234113583735de4868a48f4f0004849941ab19528163e6

Sharing

Copy URL Twitter E-mail

General

Target

658d4ef4df2744bf8c234113583735de4868a48f4f0004849941ab19528163e6
Size

4.8MB
MD5

20fed37c3eb350157fccb0d2e92fe6b8
SHA1

39140a6cbe96e9862737921e349aec0ffc9f88bd
SHA256

658d4ef4df2744bf8c234113583735de4868a48f4f0004849941ab19528163e6
SHA512

26135e63e1cc0057f8491571b70224b88c3035e2ee430828554741f81d4df7f1f79894018e6763a1c12e963e33869875424bc001b384cd292445c10c7e0c2147
SSDEEP

49152:3xQuJ3+GFuDfj+JihE7GcKiJCa0CcWb1oK9:3xQursWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
658d4ef4df2744bf8c234113583735de4868a48f4f0004849941ab19528163e6

Files

658d4ef4df2744bf8c234113583735de4868a48f4f0004849941ab19528163e6
.exe windows x86

40e1cf2ebd0802a22c2d65390c466ed4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryInfoKeyA
RegQueryValueExA

comctl32

CreateStatusWindowA
CreateToolbarEx
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageCount
ImageList_ReplaceIcon
InitCommonControls
MenuHelp
PropertySheetA

comdlg32

ChooseFontA
GetOpenFileNameA
GetSaveFileNameA

ddraw

DirectDrawCreateEx

dinput

DirectInputCreateA

dsound

DirectSoundCreate

gdi32

BitBlt
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePen
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteObject
GetClipBox
GetDCOrgEx
GetDeviceCaps
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
LineTo
MoveToEx
PatBlt
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetStretchBltMode
SetTextColor
StretchDIBits

kernel32

CloseHandle
CopyFileA
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DefineDosDeviceA
DeviceIoControl
DuplicateHandle
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentThread
GetExitCodeProcess
GetExitCodeThread
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetThreadPriority
GetVersionExA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFree
HeapAlloc
HeapFree
LoadLibraryA
OutputDebugStringA
ReadFile
SetErrorMode
SetFileAttributesA
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject
WriteFile
lstrcatA
lstrcpyA
lstrlenA

msvcrt

_chmod
_getcwd
_mkdir
_stat
_strdup
_stricmp
_strnicmp
__getmainargs
__p___argc
__p___argv
__p__environ
__set_app_type
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_getch
_iob
_kbhit
_setmode
_splitpath
_stat
_stricmp
_strnicmp
_wcsicmp
abort
atexit
atoi
atol
bsearch
calloc
ceil
clock
cos
exit
exp
fclose
feof
fflush
fgetc
fgets
floor
fopen
fprintf
fread
free
fseek
ftell
fwrite
getchar
getenv
isalnum
isdigit
isprint
isspace
localtime
log
malloc
memcpy
memmove
memset
perror
pow
printf
puts
qsort
raise
rand
realloc
remove
signal
sin
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcpy
strerror
strncmp
strncpy
strrchr
strspn
strstr
strtod
strtok
strtol
time
tolower
toupper
ungetc
vfprintf
vprintf
vsprintf

shell32

ExtractIconA
SHBrowseForFolder
SHGetMalloc
SHGetPathFromIDList
ShellExecuteA

user32

AdjustWindowRectEx
AppendMenuA
BeginPaint
CallWindowProcA
CheckMenuItem
CheckMenuRadioItem
ClientToScreen
CopyRect
CreateDialogParamA
CreateIconFromResource
CreateIconFromResourceEx
CreateWindowExA
DefWindowProcA
DestroyAcceleratorTable
DestroyMenu
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawFocusRect
DrawTextA
EnableMenuItem
EnableWindow
EndDialog
EndPaint
EqualRect
FillRect
GetActiveWindow
GetAsyncKeyState
GetClientRect
GetDC
GetDlgItem
GetFocus
GetKeyboardState
GetMenu
GetMessageA
GetMessagePos
GetParent
GetScrollInfo
GetScrollPos
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InflateRect
IntersectRect
InvalidateRect
IsDialogMessageA
IsIconic
IsWindow
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadImageA
LoadMenuA
MessageBoxA
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenuItemInfoA
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowCursor
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
UnionRect
UpdateWindow
wvsprintfA

winmm

timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 7.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

40e1cf2ebd0802a22c2d65390c466ed4

Headers

File Characteristics

Imports

advapi32

comctl32

comdlg32

ddraw

dinput

dsound

gdi32

kernel32

msvcrt

shell32

user32

winmm

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.data Size: 1.2MB - Virtual size: 1.2MB

.bss Size: - Virtual size: 7.4MB

.idata Size: 9KB - Virtual size: 9KB

.rsrc Size: 248KB - Virtual size: 247KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 1.2MB - Virtual size: 1.2MB

.bss
Size: - Virtual size: 7.4MB

.idata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 248KB - Virtual size: 247KB