b5744aefbacecfb224cf1a2833f9b08a8e7b395a8ecc3101b5881e4da96fe5a1

Sharing

Copy URL Twitter E-mail

General

Target

b5744aefbacecfb224cf1a2833f9b08a8e7b395a8ecc3101b5881e4da96fe5a1
Size

2.4MB
MD5

73328ecb1f42c956772482c4cbffa92e
SHA1

9ad1ef1153aa2af23a41d718089703c366a84375
SHA256

b5744aefbacecfb224cf1a2833f9b08a8e7b395a8ecc3101b5881e4da96fe5a1
SHA512

4ca91f4423b87dd50138793836acd826782ce2a1d7f6ef90319e9c0a691e16e6594a5551545c089977fc95a3b8c748c19b4b6d9c987ccdca2be8e3efbb141955
SSDEEP

49152:HK0kx0XWgZiBqnbeOdIJjNxJDsjL9CopQ:MqnbvdoHJDs39CopQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5744aefbacecfb224cf1a2833f9b08a8e7b395a8ecc3101b5881e4da96fe5a1

Files

b5744aefbacecfb224cf1a2833f9b08a8e7b395a8ecc3101b5881e4da96fe5a1
.exe windows x86

169e0c3a19c37997087e393dd1365d4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

winmm

waveOutSetPlaybackRate
waveOutSetVolume
waveOutWrite
waveOutUnprepareHeader

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetCPInfo
IsValidCodePage
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DuplicateHandle
EnumResourceLanguagesW
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentThread
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDrives
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileIntW
GetTickCount
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTempFileNameW
GetTempPathW
GetTimeZoneInformation
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
ReadFile
RemoveDirectoryW
ResumeThread
SetConsoleTitleW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ExitProcess
LeaveCriticalSection
LoadLibraryA
GetPrivateProfileStringW

user32

EnableMenuItem
EnableWindow
EndDialog
ExitWindowsEx
FillRect
GetActiveWindow
GetCapture
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetMessageTime
GetMessageW
GetNextDlgTabItem
GetParent
GetPropW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
InvalidateRect
IsDialogMessageW
IsIconic
IsWindowEnabled
IsWindowVisible
DrawTextW
LoadBitmapW
LoadCursorW
LoadIconW
LoadStringW
MapWindowPoints
MessageBoxW
ModifyMenuW
MoveWindow
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemBitmaps
SetPropW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
DrawTextExW
DrawMenuBar
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CharUpperW
CharToOemW
CallWindowProcW
GetWindowWord
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CopyRect
ClientToScreen
IsZoomed
CheckMenuItem

winspool.drv

XcvDataW
WaitForPrinterChange
WritePrinter
StartPagePrinter
StartDocPrinterW
StartDocPrinterA
SetPrinterW
SetPrinterA

advapi32

StartServiceW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
SetFileSecurityW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
GetTokenInformation
EnumDependentServicesW
DeleteService
RegCloseKey

Sections

.text
Size: 440KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fik33
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

169e0c3a19c37997087e393dd1365d4a

Headers

File Characteristics

Imports

msvcrt

winmm

version

kernel32

user32

winspool.drv

advapi32

Sections

.text Size: 440KB - Virtual size: 436KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 14.0MB

.tls Size: 4KB - Virtual size: 34B

.rsrc Size: 32KB - Virtual size: 32KB

.fik33 Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 440KB - Virtual size: 436KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 14.0MB

.tls
Size: 4KB - Virtual size: 34B

.rsrc
Size: 32KB - Virtual size: 32KB

.fik33
Size: 2.0MB - Virtual size: 2.0MB