8c0428def202d57d71734472c0f5a33fcdff20bbf37984baae46e4d096ec90d0

Sharing

Copy URL Twitter E-mail

General

Target

8c0428def202d57d71734472c0f5a33fcdff20bbf37984baae46e4d096ec90d0
Size

2.0MB
MD5

a665a8c9795eee9acae845aaae1e5511
SHA1

948ac35547969d4854de03a31bde10697ccd1c89
SHA256

8c0428def202d57d71734472c0f5a33fcdff20bbf37984baae46e4d096ec90d0
SHA512

e5f1ac8e14c64b9dd5a5a6c6c65165aff874d638da3817be1f60fb7647111af7a7d3aed1706bf8e5b27c2b5d66462fbb3f9df0004e527b9d1daf4cc5383d902f
SSDEEP

24576:L/bKgo7NtnbPI3Ju3Syl3X8g4krPuzAtLwOksPnpfYtKP/sRxTHgH6saissYDhXP:L/0bzNBVksPCtKP/sRFA24Ez7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c0428def202d57d71734472c0f5a33fcdff20bbf37984baae46e4d096ec90d0

Files

8c0428def202d57d71734472c0f5a33fcdff20bbf37984baae46e4d096ec90d0
.exe windows:6 windows x86

0a29ba615b063dbd037ed3c4d7966597

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoUninitialize

comctl32

CreateStatusWindowW
ImageList_Destroy
ImageList_Remove
InitCommonControlsEx
ImageList_Create
ord8
ImageList_ReplaceIcon

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

closesocket
gethostbyname
ntohl
WSASetLastError
inet_addr
send
inet_ntoa
gethostname
recv
WSAGetLastError
WSACleanup

shlwapi

PathFileExistsW

kernel32

GetFileSize
CreateDirectoryExW
GetFullPathNameW
GetLocalTime
FlushFileBuffers
WideCharToMultiByte
AddDllDirectory
FileTimeToSystemTime
GetFileTime
GetPrivateProfileIntW
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LockResource
LoadResource
FindResourceW
GlobalLock
GlobalUnlock
CopyFileW
DeleteCriticalSection
IsBadWritePtr
GetCommandLineW
SetProcessAffinityMask
GetProcessAffinityMask
SetErrorMode
GetCurrentThreadId
SetCurrentDirectoryW
VirtualAlloc
VirtualFree
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
SetFilePointer
GetFileType
DeleteFiber
ConvertFiberToThread
DeleteFileW
QueryPerformanceCounter
GlobalMemoryStatus
GetEnvironmentVariableW
GetConsoleMode
ReadConsoleA
ReadConsoleW
SetConsoleMode
RtlUnwind
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetStartupInfoW
RaiseException
IsDebuggerPresent
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
CreateProcessW
TerminateProcess
GetProcAddress
UnhandledExceptionFilter
LoadLibraryW
WriteFile
GlobalAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFileAttributesExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetConsoleCtrlHandler
DecodePointer
TlsAlloc
SetEndOfFile
GetCurrentProcessId
CreateFileW
FindNextFileW
FindFirstFileW
FindClose
lstrcmpW
MultiByteToWideChar
lstrcpyW
lstrcatW
GetPrivateProfileStringW
lstrlenW
GetCurrentProcess
WritePrivateProfileStringW
lstrcpynW
GetTickCount
CreateThread
WaitForMultipleObjects
Sleep
SetFilePointerEx
GetSystemInfo
CloseHandle
GetFileSizeEx
ReadFile
EncodePointer
CompareStringW
LCMapStringW
GetTimeZoneInformation
HeapReAlloc
GetConsoleOutputCP
SetStdHandle
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
OpenEventW
CreateEventW
ReleaseMutex
CreateMutexW
LoadLibraryExW
GetSystemTimeAsFileTime
FreeLibrary
GetModuleHandleW
SystemTimeToFileTime
GetModuleFileNameW
SetUnhandledExceptionFilter
WaitForSingleObject
SetEvent
SetLastError
IsProcessorFeaturePresent
GetLastError
SetEnvironmentVariableW
GetStringTypeW
HeapSize
GetStdHandle
WriteConsoleW

user32

TranslateAcceleratorW
TranslateMessage
PostQuitMessage
SetForegroundWindow
IsIconic
CheckRadioButton
SendDlgItemMessageW
GetMenuItemInfoW
CheckMenuRadioItem
DestroyWindow
CreateWindowExW
DrawMenuBar
AppendMenuW
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
IsWindow
GetDlgItemTextW
GetMenuState
GetMenu
GetDC
CreateDialogIndirectParamW
ReleaseDC
TrackPopupMenu
SetMenuItemInfoW
IsWindowEnabled
IsDlgButtonChecked
GetDlgItemInt
CheckDlgButton
EnableMenuItem
SetDlgItemInt
GetCursorPos
GetFocus
MessageBoxW
EndDialog
SetWindowTextW
IsDialogMessageW
GetUserObjectInformationW
DispatchMessageW
LoadAcceleratorsW
GetWindowPlacement
UnregisterClassW
IsWindowVisible
DefWindowProcW
CreateDialogParamW
GetMessageW
SetDlgItemTextW
SetFocus
SetDlgItemTextA
GetDlgItem
DialogBoxParamW
EnableWindow
LoadMenuW
GetSubMenu
SetMenuDefaultItem
DestroyMenu
DestroyIcon
LoadImageW
LoadStringW
GetWindowLongW
GetWindowRect
SetWindowPos
ScreenToClient
SendMessageW
GetSystemMetrics
RegisterClassExW
MoveWindow
LoadIconW
LoadCursorW
GetClientRect
GetDesktopWindow
GetParent
GetSysColor
FindWindowW
PostMessageW
IsCharLowerW
CharLowerBuffW
CharUpperBuffW
CharLowerW
IsCharAlphaNumericW
wsprintfW
GetProcessWindowStation
DestroyAcceleratorTable
ShowWindow
SetWindowLongW

gdi32

SetTextColor
GetObjectW
CreateSolidBrush
CreateFontIndirectW
GetDeviceCaps
SetBkColor
DeleteObject
CreateFontW

comdlg32

GetOpenFileNameW

advapi32

CreateServiceW
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
DeleteService
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
QueryServiceStatus
StartServiceW
AddAccessAllowedAce
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
CopySid
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
CryptGenRandom

shell32

SHGetFolderPathW
SHCreateItemFromParsingName
SHGetKnownFolderPath
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetMalloc

iphlpapi

GetAdaptersInfo

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 158.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a29ba615b063dbd037ed3c4d7966597

Headers

DLL Characteristics

File Characteristics

Imports

ole32

comctl32

version

ws2_32

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

iphlpapi

crypt32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 352KB - Virtual size: 351KB

.data Size: 22KB - Virtual size: 158.5MB

.rsrc Size: 548KB - Virtual size: 547KB

.reloc Size: 58KB - Virtual size: 57KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 352KB - Virtual size: 351KB

.data
Size: 22KB - Virtual size: 158.5MB

.rsrc
Size: 548KB - Virtual size: 547KB

.reloc
Size: 58KB - Virtual size: 57KB