922d75c36f48e2291284158e6179d0a38528a37b1695ff5e4f61a3745bb47d61

Sharing

Copy URL

Twitter E-mail

General

Target

922d75c36f48e2291284158e6179d0a38528a37b1695ff5e4f61a3745bb47d61
Size

1.6MB
MD5

7e176312825e46f899e956d564e519b0
SHA1

73aa087a80ebb286c2b78e64877875820f9d1897
SHA256

922d75c36f48e2291284158e6179d0a38528a37b1695ff5e4f61a3745bb47d61
SHA512

eccffbee19d1cc33f909cedbde230143a0fe7d1b2534375b212796650a27e5024b905a9889de8ed43a05910684092578904ead4ed4fa1c7c30f224daf9859f5b
SSDEEP

49152:fKK12VSb1+/zScwpMMMMMMMMbMMMMMMMMOOsvA0cCFqTvWr4H:H2kbuOcwpMMMMMMMMbMMMMMMMMVsIgqh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
922d75c36f48e2291284158e6179d0a38528a37b1695ff5e4f61a3745bb47d61

Files

922d75c36f48e2291284158e6179d0a38528a37b1695ff5e4f61a3745bb47d61
.exe windows x86

7a682abefcefec970fbc1b3ba44b68f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msacm32

acmFormatTagDetailsW
acmFormatTagEnumA
acmStreamOpen
acmStreamClose

mpr

WNetOpenEnumA
WNetCloseEnum

comctl32

ImageList_Write
UninitializeFlatSB
InitializeFlatSB
InitCommonControlsEx
ImageList_SetOverlayImage
ord17

kernel32

HeapReAlloc
MultiByteToWideChar
VirtualAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
LoadLibraryA
LCMapStringA
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
IsValidCodePage
DisableThreadLibraryCalls
DisconnectNamedPipe
DosDateTimeToFileTime
GetLocaleInfoA
GetProcAddress
GetLastError
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
HeapFree
VirtualFree
LCMapStringW
GetStringTypeW
GetStringTypeA
LeaveCriticalSection
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

user32

MessageBeep
MessageBoxA
mouse_event
wsprintfA
MenuItemFromPoint
SetFocus

shlwapi

StrTrimA
StrToIntExA
StrToIntA

Sections

.text
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fcm731
Size: 399KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a682abefcefec970fbc1b3ba44b68f2

Headers

File Characteristics

Imports

msacm32

mpr

comctl32

kernel32

user32

shlwapi

Sections

.text Size: 420KB - Virtual size: 419KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 14.0MB

.tls Size: 4KB - Virtual size: 17B

.rsrc Size: 804KB - Virtual size: 804KB

.fcm731 Size: 399KB - Virtual size: 400KB

.text
Size: 420KB - Virtual size: 419KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 14.0MB

.tls
Size: 4KB - Virtual size: 17B

.rsrc
Size: 804KB - Virtual size: 804KB

.fcm731
Size: 399KB - Virtual size: 400KB