b633b376212d9cf7eb8e586ce863555461ff93f1f9bc9a7fc28ce6ad29a2beee

Sharing

Copy URL Twitter E-mail

General

Target

b633b376212d9cf7eb8e586ce863555461ff93f1f9bc9a7fc28ce6ad29a2beee
Size

792KB
MD5

d59fa0fce662157e00f26a74a817b3c8
SHA1

b0aea46295c5dbe69a394c807db15928edd24c6c
SHA256

b633b376212d9cf7eb8e586ce863555461ff93f1f9bc9a7fc28ce6ad29a2beee
SHA512

41a0df9c62a23f724c346a3d07c65f9c28fc8e49ea2779a695b423799afa6bef9798c5225f99c8174787086bfc0358d6e7629e0d40d4938bab09d6499da6bba1
SSDEEP

24576:0iEjMDgeg3Fc/gXPG1IDkatzof8i3J/wyV:yjl19G1OF9XyV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b633b376212d9cf7eb8e586ce863555461ff93f1f9bc9a7fc28ce6ad29a2beee

Files

b633b376212d9cf7eb8e586ce863555461ff93f1f9bc9a7fc28ce6ad29a2beee
.exe windows:4 windows x86

e54b06650d42e05a67a79b5855a17fae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
DeviceIoControl
CreateFileW
GetCurrentProcessId
GetCommandLineW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
CreateMutexW
GetLastError
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
Module32FirstW
CreateEventW
TerminateProcess
GetTickCount
GetExitCodeThread
SetEvent
GetPrivateProfileStringW
GetPrivateProfileIntW
GetLogicalDrives
WriteFile
FreeResource
WaitForSingleObject
GetLocalTime
MulDiv
GetTempFileNameW
GetDriveTypeW
VirtualProtect
lstrcpyW
MultiByteToWideChar
FindClose
FindFirstFileW
GetFullPathNameW
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
SetConsoleCtrlHandler
LoadLibraryA
SetStdHandle
GetStringTypeW
SetLastError
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetCurrentThread
FatalAppExitA
HeapSize
RaiseException
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
ExitThread
CreateThread
HeapReAlloc
WideCharToMultiByte
RtlUnwind
LoadLibraryExW
SystemTimeToFileTime
LocalFileTimeToFileTime
TlsGetValue
OpenThread
FindNextFileW
DeleteFileW
RemoveDirectoryW
GetDiskFreeSpaceExW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
FlushInstructionCache
lstrlenA
OutputDebugStringW
DebugBreak
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetTempPathW
InterlockedIncrement
GetVersionExW
EnterCriticalSection
InterlockedDecrement
GetCurrentThreadId
LeaveCriticalSection
TlsSetValue
GetEnvironmentVariableW
GetProcessHeap
HeapAlloc
TlsAlloc
SetEnvironmentVariableW
ReleaseMutex
TlsFree
HeapFree
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
LoadLibraryW
FormatMessageW
GetSystemTime
LocalFree
FreeLibrary
GetSystemTimeAsFileTime
CreateFileA
GetModuleFileNameW
lstrlenW
GetStringTypeA
SetFilePointer
ReadFile
GetFileType

user32

ShowWindow
SetForegroundWindow
PeekMessageW
CreateDialogParamW
IsWindow
MessageBoxW
DestroyWindow
wvsprintfW
CharNextW
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
GetClassInfoExW
RegisterClassExW
DefWindowProcW
LoadCursorW
IsIconic
GetDesktopWindow
ClientToScreen
AdjustWindowRectEx
GetDlgCtrlID
CallWindowProcW
EnableWindow
SetCursor
InflateRect
OffsetRect
IsWindowEnabled
EndDialog
GetActiveWindow
DialogBoxParamW
BringWindowToTop
LoadIconW
ScreenToClient
SetWindowRgn
PostQuitMessage
GetParent
GetWindow
SystemParametersInfoW
GetSystemMetrics
LoadImageW
GetClassNameW
IsDialogMessageW
CreateWindowExW
wsprintfW
PostMessageW
KillTimer
SetTimer
FindWindowExW
GetWindowThreadProcessId
GetDC
ReleaseDC
GetClientRect
SetWindowPos
GetWindowLongW
IsWindowVisible
GetWindowRect
MapWindowPoints
InvalidateRect
RedrawWindow
BeginPaint
EndPaint
GetFocus
SetFocus
MoveWindow
SendMessageW
GetWindowTextW
SetWindowTextW
GetDlgItem

gdi32

CreateRoundRectRgn
StretchBlt
CreateCompatibleDC
RestoreDC
SelectObject
SetViewportOrgEx
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
OffsetViewportOrgEx
SaveDC
Rectangle
GetStockObject
CreatePen
CreateFontW
GetTextExtentPointA
GetTextMetricsA
EnumFontFamiliesW
CreateCompatibleBitmap

shell32

ord165
SHFileOperationW
SHCreateDirectoryExW
Shell_NotifyIconW
SHGetSpecialFolderPathW
SHBrowseForFolderW
ShellExecuteW
ShellExecuteExW
SHAppBarMessage
SHGetPathFromIDListW

ole32

CoCreateGuid
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantClear

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

wininet

HttpOpenRequestW
InternetCloseHandle
InternetConnectW
HttpSendRequestW
HttpQueryInfoW
InternetGetConnectedState
InternetOpenW

iphlpapi

GetAdaptersInfo
GetIpAddrTable

setupapi

SetupIterateCabinetW

shlwapi

PathIsRelativeW
PathFindFileNameW
PathIsPrefixW
StrCmpW
StrToIntExW
SHGetValueA
PathRemoveFileSpecW
PathCombineW
SHGetValueW
SHSetValueA
PathFileExistsW
PathAppendW

netapi32

Netbios

advapi32

RegSetValueExW
RegDeleteValueW
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

Sections

.text
Size: 296KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e54b06650d42e05a67a79b5855a17fae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

version

wininet

iphlpapi

setupapi

shlwapi

netapi32

advapi32

Sections

.text Size: 296KB - Virtual size: 292KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 24KB - Virtual size: 33KB

.rsrc Size: 440KB - Virtual size: 440KB

.text
Size: 296KB - Virtual size: 292KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 24KB - Virtual size: 33KB

.rsrc
Size: 440KB - Virtual size: 440KB