d944f309a113ec2b3af674f4d1f75f4b0b6d86dd0bdda8748de13894af1acd32

Sharing

Copy URL Twitter E-mail

General

Target

d944f309a113ec2b3af674f4d1f75f4b0b6d86dd0bdda8748de13894af1acd32
Size

371KB
MD5

4e5a83c673588bccfa46c7be69d6216f
SHA1

4a19ba893080bcc23f4ebf7d0c97b456bf73a986
SHA256

d944f309a113ec2b3af674f4d1f75f4b0b6d86dd0bdda8748de13894af1acd32
SHA512

00c4fca171bd4b4b44dbb490416266905af24ed97d487d250295f91b09a47d60621d747a496e55a9e17ad8acd2bb044b3529c89589c23cf84598beabb7969aec
SSDEEP

6144:QiNFDbr9n7BRHErWveOJ1TSwHwI+Hg01p5qzw1kRtoV5g:NNHHErWvdowQRH5qzckRtYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d944f309a113ec2b3af674f4d1f75f4b0b6d86dd0bdda8748de13894af1acd32

Files

d944f309a113ec2b3af674f4d1f75f4b0b6d86dd0bdda8748de13894af1acd32
.exe windows:5 windows x86

b334711afe29ab04662b91ce6b73ea46

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netcheckalarm

?IsCurrentAppAlreadyRun@@YAHXZ
?IsMainAppRunning@@YAHPBD@Z

kernel32

CreateFileA
GetCPInfo
GetOEMCP
SetErrorMode
GetFileAttributesA
RtlUnwind
HeapFree
RaiseException
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
GetFullPathNameW
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
HeapCreate
VirtualFree
GetACP
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDriveTypeA
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
GlobalFlags
GetCurrentDirectoryA
WritePrivateProfileStringA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FreeResource
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
DeleteFileW
GetCurrentProcess
GetCurrentProcessId
CreateDirectoryW
SetUnhandledExceptionFilter
FindClose
FindNextFileW
FindFirstFileW
lstrcpyW
SetLastError
GetCurrentThreadId
CreateFileW
FindResourceW
ExitProcess
CreateProcessA
GetModuleFileNameW
GetPrivateProfileStringW
CreateThread
Sleep
GetVersionExA
FreeLibrary
LoadLibraryA
GetProcAddress
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
OpenEventA
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetLastError
GetPrivateProfileStringA
InterlockedCompareExchange

user32

UnregisterClassA
DestroyMenu
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
MapWindowPoints
SetMenu
UpdateWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetMessagePos
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
wsprintfW
EnableWindow
SetTimer
RegisterDeviceNotificationA
AdjustWindowRectEx
SetForegroundWindow

gdi32

DeleteDC
TextOutA
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

PathFindExtensionA
PathFileExistsW
PathFindFileNameA
PathAppendW
PathRemoveFileSpecW

oleaut32

VariantTimeToSystemTime
VarUdateFromDate
SystemTimeToVariantTime
VariantClear
VariantChangeType
VariantInit

setupapi

CM_Request_Device_EjectW
SetupDiDestroyDeviceInfoList
CM_Disable_DevNode
CM_Get_DevNode_Status
CM_Get_Device_IDW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
CM_Get_Parent

rpcrt4

UuidFromStringW

dbghelp

MiniDumpWriteDump

Sections

.text
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b334711afe29ab04662b91ce6b73ea46

Headers

DLL Characteristics

File Characteristics

Imports

netcheckalarm

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

setupapi

rpcrt4

dbghelp

Sections

.text Size: 266KB - Virtual size: 265KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 11KB - Virtual size: 26KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 266KB - Virtual size: 265KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 40KB - Virtual size: 39KB