a4f164a0df79d5eb4e2ad357dc845b92fb942f6cc3889109a64902257c50740c

Sharing

Copy URL Twitter E-mail

General

Target

a4f164a0df79d5eb4e2ad357dc845b92fb942f6cc3889109a64902257c50740c
Size

2.1MB
MD5

d0eaf2b91cffbc88b1e87e949df1faba
SHA1

9670889cddc079cdf0815ce0d35ff3b1ae2cc968
SHA256

a4f164a0df79d5eb4e2ad357dc845b92fb942f6cc3889109a64902257c50740c
SHA512

b1dd57a9e97c232c81361b11cdea6183bba4e81f22b689d82152ae7a4a212b9652525523284caf5e093b1f4ce4eec39b3ed391aa85513888e104312526ffaf3c
SSDEEP

24576:+yOpakfSnKfqy5RkPClBuaCE+iWDBMzJygsFOyWhfxu23dNrywKXA/5Bv3xco4F6:+voUrLP3xgGftTGzmlQDTlLQ3eoqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4f164a0df79d5eb4e2ad357dc845b92fb942f6cc3889109a64902257c50740c

Files

a4f164a0df79d5eb4e2ad357dc845b92fb942f6cc3889109a64902257c50740c
.exe windows:4 windows x86

78b4eefd73db76274e1b82762a66b257

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GlobalAlloc
ResetEvent
GlobalLock
GlobalUnlock
RemoveDirectoryA
DeleteFileA
CopyFileA
CreateDirectoryA
GetModuleHandleA
GlobalMemoryStatus
GetLocalTime
FindNextFileA
GetVersionExA
GetTempFileNameA
SetThreadIdealProcessor
GetExitCodeProcess
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetSystemDefaultLangID
GetUserDefaultLangID
GetSystemInfo
CreateEventA
HeapAlloc
HeapFree
HeapReAlloc
SetFilePointer
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetFileType
CreateFileA
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetCurrentThreadId
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FindClose
RtlUnwind
SetStdHandle
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
TlsGetValue
WriteFile
HeapSize
SetEndOfFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RaiseException
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcessId
GetProcessHeap
IsProcessorFeaturePresent
lstrcmpiA
GetFullPathNameA
InterlockedCompareExchange
InterlockedExchange
CreateFileW
GetFileSize
OutputDebugStringA
GetStartupInfoA
CreateProcessA
FindFirstFileA
GlobalFree
lstrcpyA
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetLastError
GetModuleFileNameA
GetFileAttributesA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
WaitForSingleObject
SetEvent
SetCurrentDirectoryA
CreateMutexA
CloseHandle
Sleep
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr

user32

CreateIconIndirect
OpenIcon
AdjustWindowRectEx
SetRect
GetWindowLongA
SetWindowLongA
RegisterClassExA
SetWindowRgn
GetClassNameA
SendMessageTimeoutA
IsWindowVisible
SetWindowPlacement
EnableWindow
MoveWindow
DestroyIcon
PostQuitMessage
DefWindowProcA
SetFocus
ChangeDisplaySettingsExA
EnumDisplaySettingsA
GetSystemMetrics
DrawMenuBar
InsertMenuItemA
CreateMenu
DialogBoxParamA
SystemParametersInfoA
ChangeDisplaySettingsA
SetCursorPos
SetMenu
ShowCursor
DestroyMenu
DestroyWindow
LoadCursorA
SetClassLongA
ClientToScreen
SetCursor
GetWindowTextA
DeleteMenu
GetSystemMenu
LoadIconA
GetWindowRect
CreateWindowExA
RegisterClassA
FindWindowA
SetForegroundWindow
GetDC
ReleaseDC
GetMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
SetWindowTextA
GetWindowPlacement
EndDialog
PeekMessageA
GetKeyboardState
SetKeyboardState
GetCursorPos
ScreenToClient
PostMessageA
ShowWindow
GetSubMenu
TrackPopupMenu
RedrawWindow
MessageBoxA
IsIconic
SendMessageA
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetClientRect
SetWindowPos
UpdateWindow
EnumWindows

gdi32

SelectObject
TextOutA
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
SetTextColor
CreateBitmap
ExtCreateRegion
GetDIBits
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
GetStockObject
SetStretchBltMode
StretchDIBits
CreateDIBSection
EnumFontFamiliesExA

shell32

DragQueryFileA
DragAcceptFiles
Shell_NotifyIconA
FindExecutableA
ShellExecuteExA
SHGetSpecialFolderPathA
DragFinish

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA

comctl32

ord17

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize

winmm

waveInGetNumDevs
timeGetTime
joyGetPosEx
mciSendStringA
waveInGetDevCapsA
mmioStringToFOURCCA
mmioOpenA
waveOutGetDevCapsA
waveOutGetNumDevs
timeGetDevCaps
timeBeginPeriod
joyGetNumDevs
timeEndPeriod
mmioClose
mciSendCommandA
mmioAscend
mmioDescend
mmioRead

msacm32

acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest

imm32

ImmAssociateContext

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

d3d9

Direct3DCreate9

dsound

ord1

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78b4eefd73db76274e1b82762a66b257

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

winmm

msacm32

imm32

version

d3d9

dsound

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 158KB - Virtual size: 158KB

.data Size: 117KB - Virtual size: 2.3MB

_RDATA Size: 24KB - Virtual size: 23KB

.data1 Size: 512B - Virtual size: 224B

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 282KB - Virtual size: 282KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 158KB - Virtual size: 158KB

.data
Size: 117KB - Virtual size: 2.3MB

_RDATA
Size: 24KB - Virtual size: 23KB

.data1
Size: 512B - Virtual size: 224B

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 282KB - Virtual size: 282KB