a59ab74c84bcfafbc9436dfe648e5af567415d9d789fc331afcdd91c28e93d9c

Sharing

Copy URL Twitter E-mail

General

Target

a59ab74c84bcfafbc9436dfe648e5af567415d9d789fc331afcdd91c28e93d9c
Size

304KB
MD5

6c94d8dc094b4d93b05344e58739b7c0
SHA1

f3fca6d1be23a8b0d79c13909728f6405165b0a8
SHA256

a59ab74c84bcfafbc9436dfe648e5af567415d9d789fc331afcdd91c28e93d9c
SHA512

961b84e33685e876efeb52ee04e9dd9c674ec137bb2ef0beb5dc96b38f098556d142c5b245470b1be046cbd9fc8d3745f8fd2338f8120f4211c3aa1372c530e5
SSDEEP

3072:bWOh4zuk5RK8FCa5VUUWRofbjcKO9ga+GfVY8EPT8ulBMhPWBu5:V475RK8Tdc57+GbI8kShO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59ab74c84bcfafbc9436dfe648e5af567415d9d789fc331afcdd91c28e93d9c

Files

a59ab74c84bcfafbc9436dfe648e5af567415d9d789fc331afcdd91c28e93d9c
.exe windows:4 windows x86

f539de0fa6f0070fefaafc244a6fd019

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
MulDiv
SetLastError
FreeLibrary
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
MultiByteToWideChar
InterlockedDecrement
WideCharToMultiByte
GetProcAddress
GlobalFree
InterlockedIncrement
GlobalUnlock
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
LoadLibraryA
GetFileType
HeapDestroy
GetWindowsDirectoryA
CreateFileA
GetSystemDirectoryA
GetVersionExA
Sleep
CloseHandle
WriteFile
SizeofResource
SetFileAttributesA
GetLastError
GetProfileStringA
LockResource
LoadResource
FindResourceA
lstrlenA
lstrcatA
lstrcpyA
DeleteFileA

user32

AdjustWindowRectEx
ScreenToClient
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
SetFocus
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
ShowWindow
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
PtInRect
GetSysColorBrush
InvalidateRect
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
GetPropA
CallWindowProcA
RemovePropA
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
GetClassNameA
SetWindowPos
RegisterWindowMessageA
CopyRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
LoadStringA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
PostQuitMessage
PostMessageA
RedrawWindow
GetSysColor
EnableWindow
LoadCursorA
SetCursor
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
SetWindowLongA
SetPropA
GetSubMenu
UnhookWindowsHookEx
IntersectRect
OffsetRect
GetMessageTime
ShowCaret
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
HideCaret
UnregisterClassA

gdi32

DeleteObject
CreateSolidBrush
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
PatBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegQueryValueExA
CreateServiceA
StartServiceA
QueryServiceStatus
RegDeleteValueA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
DeleteService
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f539de0fa6f0070fefaafc244a6fd019

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 184KB - Virtual size: 190KB

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 184KB - Virtual size: 190KB