5ccd5815d0f0945e91c2791c5bbe79dee1dd3baf839bf172494fcf8db8f75212

Sharing

Copy URL

Twitter E-mail

General

Target

5ccd5815d0f0945e91c2791c5bbe79dee1dd3baf839bf172494fcf8db8f75212
Size

344KB
MD5

856e5a35efc80e1453a32ff080e29ebf
SHA1

657f704ded8c9148e11e551d907b8fd5e0d906f0
SHA256

5ccd5815d0f0945e91c2791c5bbe79dee1dd3baf839bf172494fcf8db8f75212
SHA512

7901930cea6a0e92e5b501d396797b9178107af28cbf5a86a93c83850518b8a45d60b3511a53b0e6792e2f7d6ecdbbf16d4b1e0894b3b104ea0498f5ad2b2441
SSDEEP

6144:oeY+LRWfvE7Cifng3OvVDlEqazE/TXw7IoCYR/xpO7GpY0Nt:vY+8nnevVDl7ag/Lw7EuxpOiplt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ccd5815d0f0945e91c2791c5bbe79dee1dd3baf839bf172494fcf8db8f75212

Files

5ccd5815d0f0945e91c2791c5bbe79dee1dd3baf839bf172494fcf8db8f75212
.exe windows:6 windows x86

9416c2f987677d0afe30de03c55fd03b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
GetPrivateProfileStringW
lstrcatW
GetModuleHandleW
lstrcpyW
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
GetProcessHeap
LCMapStringW
CreateFileMappingW
GetStringTypeW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapAlloc
WideCharToMultiByte
GetCurrentProcessId
CloseHandle
lstrcpyA
SetEvent
CopyFileA
MultiByteToWideChar
CreateEventW
TerminateProcess
UnmapViewOfFile
HeapFree
HeapReAlloc
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
EncodePointer
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
DecodePointer
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
GetLastError
SetLastError

user32

PostQuitMessage
wsprintfW
LoadCursorW
UpdateWindow
TranslateMessage
TranslateAcceleratorW
DrawTextExW
SystemParametersInfoW
LoadImageW
BeginPaint
InvalidateRect
EndPaint
LoadIconW
MessageBoxA
EndDialog
GetWindowTextA
MapWindowPoints
LoadBitmapW
GetClientRect
GetDlgItem
GetWindowTextLengthA
DialogBoxParamW
DefWindowProcW
DestroyWindow
MessageBoxW
CreateWindowExW
SendMessageW
RegisterClassExW
LoadAcceleratorsW
LoadStringW
wsprintfA
ShowWindow
DispatchMessageW
GetMessageW

gdi32

SetBkMode
BitBlt
SelectObject
CreateCompatibleDC
GetStockObject
DeleteDC
SetTextColor
SetBkColor
DeleteObject

advapi32

RegGetValueW

shell32

ShellExecuteExW
SHGetSpecialFolderPathA

shlwapi

StrChrW
PathFileExistsW

ws2_32

htonl
ntohl
htons
recv
connect
ntohs
socket
send
WSAStartup
WSAAsyncSelect
gethostbyname
closesocket
WSACleanup
inet_addr

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9416c2f987677d0afe30de03c55fd03b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ws2_32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 254KB - Virtual size: 253KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 254KB - Virtual size: 253KB