7b4f6089a458b766b6fbe813a148ba8c5696198a5c5c33dad228a59a76221485

Sharing

Copy URL Twitter E-mail

General

Target

7b4f6089a458b766b6fbe813a148ba8c5696198a5c5c33dad228a59a76221485
Size

1.4MB
MD5

ef49f5d2b4c42309be8524a6dfd04251
SHA1

b83c907d47aaf6e4cd1923f005d4d228dc4808bf
SHA256

7b4f6089a458b766b6fbe813a148ba8c5696198a5c5c33dad228a59a76221485
SHA512

c9b369e266148f68de53d24e90d00a5754c265faac9703bd840144ff5935e15dca22a159072ddd2a46c3531c3b8ac7d853a77e3e8940808e7a0135b885598eba
SSDEEP

24576:UMv3SM28HLU9h1KWk4qBebTqmGbRNn+AyW9EzAQkOwMm:UMLEh1O1VXXKGOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b4f6089a458b766b6fbe813a148ba8c5696198a5c5c33dad228a59a76221485

Files

7b4f6089a458b766b6fbe813a148ba8c5696198a5c5c33dad228a59a76221485
.exe windows x86

e4cd24d364dcc4858378fb4e1c866c1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
GetFileTime
SetErrorMode
RtlUnwind
HeapAlloc
ExitThread
CreateThread
HeapFree
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GlobalFlags
GetCurrentDirectoryA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FreeResource
GetCurrentProcessId
GlobalAddAtomA
ResumeThread
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalDeleteAtom
GetProcAddress
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
CreateFileA
ReadFile
GetOverlappedResult
DeviceIoControl
SetEvent
GetLastError
lstrlenA
CompareStringA
CompareStringW
MultiByteToWideChar
InterlockedExchange
GetVersion
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
Beep
GetFileAttributesA
SetFileAttributesA
DeleteFileA
GetVersionExA
CreateEventA
_lcreat
_lwrite
_lclose
WaitForSingleObject
CloseHandle
GetTickCount
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetModuleHandleA
GetModuleFileNameA
OpenMutexA
CreateMutexA

user32

RegisterClipboardFormatA
PostThreadMessageA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
MessageBeep
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
GetDC
ReleaseDC
wsprintfA
CharUpperA
MessageBoxA
GetSystemMetrics
SetCursor
LoadCursorA
LoadIconA
EnableWindow
KillTimer
SetTimer
InvalidateRect
UpdateWindow
GetClientRect
GetWindowRect
IsIconic
GetSystemMenu
PostMessageA
SendMessageA
AppendMenuA
DrawIcon
PtInRect
UnregisterClassA
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
CharNextA
CreateDialogIndirectParamA
SetRect
ReleaseCapture
SetCapture
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
SetActiveWindow
GetCapture
GetWindowTextA

gdi32

DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetDeviceCaps
CreateBitmap
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
CoRevokeClassObject
CLSIDFromProgID

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysAllocStringLen

imagehlp

MapFileAndCheckSumA

msvfw32

DrawDibDraw
DrawDibOpen
DrawDibClose

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 848KB - Virtual size: 861KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4cd24d364dcc4858378fb4e1c866c1c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

imagehlp

msvfw32

Sections

.text Size: 448KB - Virtual size: 448KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 848KB - Virtual size: 861KB

.rsrc Size: 44KB - Virtual size: 44KB

.text
Size: 448KB - Virtual size: 448KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 848KB - Virtual size: 861KB

.rsrc
Size: 44KB - Virtual size: 44KB