fc74df74b4f964ac04c1bc5b6ed0c3f6890b35500fc4bbec2b9bb16b1b11de54

Sharing

Copy URL Twitter E-mail

General

Target

fc74df74b4f964ac04c1bc5b6ed0c3f6890b35500fc4bbec2b9bb16b1b11de54
Size

1.0MB
MD5

3f27dd867af2bfe068774142f249d19a
SHA1

fb2b1bec56d0a2c2cc60797b8c302a992a18bde1
SHA256

fc74df74b4f964ac04c1bc5b6ed0c3f6890b35500fc4bbec2b9bb16b1b11de54
SHA512

3d4e33268b660542c885d024e2ef5f4b9f13fc0e437b019a696eb4487de0017149b9376cedcaf9dc147d4692360fea9c31ea36cf07b61b146dca34b95b25acc5
SSDEEP

12288:bGpLJlcQWRSnZaVbuEL0IiDuC3Fw+S8v5xY2oQifwmEtB+S8v5xY2oQifwmk:qp1lcQ8tVqEIIMHFhLoQi4mICLoQi4mk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc74df74b4f964ac04c1bc5b6ed0c3f6890b35500fc4bbec2b9bb16b1b11de54

Files

fc74df74b4f964ac04c1bc5b6ed0c3f6890b35500fc4bbec2b9bb16b1b11de54
.exe windows:4 windows x86

3e6913ba9c085a3fb193b40d5f76d8a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
SetLastError
lstrcpynA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentProcess
SetSystemPowerState
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
FindResourceA
SetStdHandle
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
SetEnvironmentVariableA
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
TerminateProcess
LoadResource
LockResource
GetFullPathNameA
WritePrivateProfileStringA
CreateThread
CreateEventA
GetFileAttributesA
SetCurrentDirectoryA
GetCommandLineA
GetModuleFileNameA
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetProfileStringA
CreateFileA
WriteFile
ReadFile
GetLastError
WaitForMultipleObjects
SetEvent
GlobalAlloc
WaitForSingleObject
CloseHandle
MulDiv
GetCurrentProcessId
GetCurrentThreadId
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
GlobalSize
GlobalLock
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
RtlUnwind
GetStartupInfoA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindFirstFileA
FindNextFileA
FindClose
GetVolumeInformationA
GetTickCount
GlobalUnlock
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
LocalFree
InterlockedDecrement
InterlockedIncrement
GetCurrentThread

user32

CharUpperA
GetSysColor
SetWindowLongA
GetWindowLongA
SendMessageA
GetWindowRect
GetSystemMetrics
RedrawWindow
InvalidateRect
EnableWindow
wsprintfA
IsWindowVisible
FillRect
OffsetRect
GetClientRect
PtInRect
SetParent
GetParent
LoadCursorA
IsRectEmpty
IsWindow
DestroyIcon
IntersectRect
InflateRect
SetRect
SetScrollPos
SetScrollRange
GetScrollRange
PostMessageA
SetCapture
GetCapture
ReleaseCapture
SetTimer
KillTimer
WinHelpA
LoadBitmapA
CopyRect
GetFocus
ChildWindowFromPointEx
ScreenToClient
GetMessagePos
UpdateWindow
SetWindowRgn
DestroyCursor
DestroyAcceleratorTable
IsChild
GetWindow
GetTopWindow
GetActiveWindow
SetWindowPos
SetFocus
DestroyMenu
SetActiveWindow
IsIconic
PeekMessageA
SetMenu
GetMenu
SetCursorPos
GetCursorPos
DeleteMenu
GetSystemMenu
ExitWindowsEx
GetForegroundWindow
TranslateMessage
LoadIconA
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetSubMenu
EnableMenuItem
GetDC
ReleaseDC
EqualRect
ValidateRect
GetDlgCtrlID
EnumDisplaySettingsA
LoadImageA
MessageBoxA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
DrawFrameControl
DrawEdge
DrawFocusRect
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
ClientToScreen
GetWindowPlacement
RegisterWindowMessageA
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
UnregisterClassA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetNextDlgTabItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
EndDialog
GetClassNameA
GetDesktopWindow
GetSysColorBrush
LoadStringA
WindowFromPoint
SystemParametersInfoA
ShowWindow
SetCursor
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
GetWindowThreadProcessId
IsWindowEnabled
SetForegroundWindow
EnumWindows
IsZoomed
GetClassInfoA
DefWindowProcA

gdi32

CreatePolygonRgn
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
SetStretchBltMode
StretchBlt
CreateDIBitmap
GetClipRgn
SelectClipRgn
DeleteObject
LPtoDP
CreateRectRgnIndirect
DeleteDC
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
EndDoc
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
StartPage
EndPage
CreateDCA
GetDeviceCaps
DPtoLP
FillRgn
CreateBitmap
CreateCompatibleDC
SelectObject
BitBlt
GetObjectA
CreatePen
PatBlt
Rectangle
Ellipse
RoundRect
CreateRectRgn
CombineRgn
GetCurrentObject
GetTextExtentPoint32A
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextMetricsA
GetClipBox
SetTextColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
MoveToEx
LineTo
StartDocA
SetBkColor
GetDIBits
RealizePalette
SelectPalette
CreatePalette
GetSystemPaletteEntries
CreateCompatibleBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn

winmm

midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA

shell32

ShellExecuteA
Shell_NotifyIconA

ole32

OleInitialize
OleUninitialize
CLSIDFromString

oleaut32

UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi

comctl32

ImageList_Destroy
ord17

ws2_32

recv
inet_ntoa
getpeername
accept
ioctlsocket
recvfrom
WSACleanup
WSAAsyncSelect
closesocket

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

Sections

.text
Size: 492KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e6913ba9c085a3fb193b40d5f76d8a4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: 492KB - Virtual size: 490KB

.rdata Size: 260KB - Virtual size: 258KB

.data Size: 72KB - Virtual size: 158KB

.rsrc Size: 204KB - Virtual size: 201KB

.text
Size: 492KB - Virtual size: 490KB

.rdata
Size: 260KB - Virtual size: 258KB

.data
Size: 72KB - Virtual size: 158KB

.rsrc
Size: 204KB - Virtual size: 201KB