4d1bcfa181527ee6d755e932c0b4ec1bead4aebeaf000fe6faf5bf779ed99c1d

Sharing

Copy URL

Twitter E-mail

General

Target

4d1bcfa181527ee6d755e932c0b4ec1bead4aebeaf000fe6faf5bf779ed99c1d
Size

549KB
MD5

c1ff6da2d34ad7e2563b8764cda2a276
SHA1

8364e158f4e8efd1cd2a8a526924d443b65cc883
SHA256

4d1bcfa181527ee6d755e932c0b4ec1bead4aebeaf000fe6faf5bf779ed99c1d
SHA512

772ea24b47a8da0192bf1b8cb3551d042e9d3d13e93350408a8d2f8a79cd1dc41f3f77248a4687d2f7d6eb732837c4aeac767dd0af92e24c5b476e6d962d0c47
SSDEEP

12288:Z8UtkE7PWgPiLDvHFgaYJXzYdcrP+sshVHnfwA0olHjOypDER:SUtkE7PWRvF+H+9hVwA0oxFpDER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d1bcfa181527ee6d755e932c0b4ec1bead4aebeaf000fe6faf5bf779ed99c1d

Files

4d1bcfa181527ee6d755e932c0b4ec1bead4aebeaf000fe6faf5bf779ed99c1d
.exe windows:5 windows x86

4f69e52fcacdcbdba949d4ccd85e6608

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetSystemDirectoryW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileAttributesW
GetFileAttributesW
ReleaseMutex
CreateMutexW
OpenMutexW
CreateEventW
DeviceIoControl
GetModuleFileNameW
GetModuleHandleW
GetDriveTypeW
GetModuleHandleExW
Sleep
GetFileSizeEx
SetFilePointer
FindClose
GetDiskFreeSpaceW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileW
LockResource
LoadResource
SizeofResource
FindResourceW
FindResourceExW
VirtualQuery
OpenFileMappingW
MulDiv
GetCurrentThread
GetExitCodeProcess
CreateProcessW
GetCommandLineW
LoadLibraryExW
GetTimeZoneInformation
HeapAlloc
HeapFree
GetProcessHeap
DuplicateHandle
DecodePointer
RaiseException
InterlockedIncrement
LocalAlloc
HeapCreate
HeapDestroy
HeapSetInformation
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFullPathNameW
GetFileType
GetConsoleMode
ReadConsoleW
GetConsoleCP
ExitProcess
GetStdHandle
GetACP
GetStringTypeW
SetStdHandle
SetEndOfFile
WriteConsoleW
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringA
HeapSize
HeapReAlloc
FormatMessageW
LocalFree
InterlockedDecrement
GetVersionExW
QueryPerformanceFrequency
QueryPerformanceCounter
GetComputerNameExW
GetComputerNameW
CreateFileW
OutputDebugStringW
LoadLibraryW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
VirtualProtect
LoadLibraryExA
DebugBreak
IsDebuggerPresent
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
OpenProcess
GetProcAddress
FreeLibrary
InterlockedExchangeAdd
InterlockedExchange
GetLocalTime
FreeConsole
AttachConsole
SetDllDirectoryW
GetCurrentDirectoryW
GetTempPathW
SetEnvironmentVariableW
GetEnvironmentVariableW
CloseHandle
SetFilePointerEx
ReadFile
WriteFile
WaitForMultipleObjects
WaitForSingleObject
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
CreateThread
VirtualFree
VirtualAlloc

user32

GetClassInfoW
GetWindowLongW
SetWindowLongW
LoadImageW
SetWindowTextW
SetTimer
EnableWindow
SendDlgItemMessageW
GetDlgItemTextW
RegisterClassW
SendMessageW
GetSystemMetrics
GetDC
GetWindowTextLengthW
SetFocus
KillTimer
CharLowerBuffW
SetDlgItemTextW
LoadStringW
GetDlgItem
EndDialog
DialogBoxParamW
ShowWindow
ReleaseDC
FillRect
DrawIconEx
GetIconInfo
GetClientRect
MapDialogRect
MessageBoxW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW

ole32

ProgIDFromCLSID
CoUninitialize
CoInitialize
CoTaskMemFree
StringFromGUID2
CoCreateGuid

crypt32

CryptBinaryToStringW
CryptBinaryToStringA

shlwapi

PathSearchAndQualifyW
PathCanonicalizeW

cabinet

ord23
ord20
ord21
ord22

dbghelp

ImageNtHeader

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

comctl32

InitCommonControlsEx

gdi32

DeleteObject
GetObjectW
GetTextExtentPoint32W
SelectObject
CreateSolidBrush

advapi32

CheckTokenMembership
ImpersonateLoggedOnUser
LookupPrivilegeValueW
CopySid
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
FreeSid
AllocateAndInitializeSid
GetSidLengthRequired
EqualSid
AdjustTokenPrivileges
GetTokenInformation
OpenThreadToken
OpenProcessToken
SetThreadToken
RevertToSelf
DuplicateToken
SetFileSecurityW
LsaNtStatusToWinError
RegOpenKeyExW
RegQueryValueExW
ConvertStringSidToSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetEntriesInAclW
GetSecurityInfo
SetNamedSecurityInfoW
SetSecurityInfo
RegCreateKeyExW
ConvertSidToStringSidW
CryptVerifySignatureW
CryptSignHashW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptExportKey
CryptGetUserKey
CryptGenRandom
CryptSetProvParam
CryptGetHashParam
RegCloseKey
CryptSetHashParam
CryptGetKeyParam
CryptSetKeyParam
CryptDestroyKey
CryptDeriveKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextW
TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsW
GetUserNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

oleaut32

SysFreeString
VariantClear
CreateErrorInfo
SysStringLen
SysAllocString

Sections

.text
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f69e52fcacdcbdba949d4ccd85e6608

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

crypt32

shlwapi

cabinet

dbghelp

version

comctl32

gdi32

advapi32

oleaut32

Sections

.text Size: 331KB - Virtual size: 330KB

.rdata Size: 127KB - Virtual size: 126KB

.data Size: 5KB - Virtual size: 91KB

.rsrc Size: 85KB - Virtual size: 84KB

.text
Size: 331KB - Virtual size: 330KB

.rdata
Size: 127KB - Virtual size: 126KB

.data
Size: 5KB - Virtual size: 91KB

.rsrc
Size: 85KB - Virtual size: 84KB