959ae14ed0045bb291e2e3d3d0964d1f489ee632a0ad270cec743bebca774c71

Sharing

Copy URL

Twitter E-mail

General

Target

959ae14ed0045bb291e2e3d3d0964d1f489ee632a0ad270cec743bebca774c71
Size

414KB
MD5

e191e622f8ef263996008d28d651d4bb
SHA1

c684f6990b69c14adabc71d46a3d89180ad31ee4
SHA256

959ae14ed0045bb291e2e3d3d0964d1f489ee632a0ad270cec743bebca774c71
SHA512

0acf0e8dc4eb8ff8c3ef68ef947d0c250bdf40bf4a20d5d0f6e389910125378dc9b78917fde952748a052eabfa6e3c5c2e7a901c1fb2173db3ca864ff3bf83a8
SSDEEP

6144:Fz38ABkKYnewT6FZBsumlhJlyeDQLiwBhvZXQ+/3OKyviIII9YB5hd670TzK:dmxT61zkhnwBhvBJ/+GIISY1AE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
959ae14ed0045bb291e2e3d3d0964d1f489ee632a0ad270cec743bebca774c71

Files

959ae14ed0045bb291e2e3d3d0964d1f489ee632a0ad270cec743bebca774c71
.exe windows:6 windows x86

c443ec60e34fe6ec76cd1229bc418659

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetModuleFileNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
FindResourceW
LoadLibraryExW
LoadLibraryW
FreeLibrary
ExpandEnvironmentStringsW
GetSystemDirectoryW
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
GetCPInfo
IsDBCSLeadByte
GetTempPathW
Sleep
GetShortPathNameW
GetEnvironmentVariableW
GetCommandLineW
MoveFileExW
CreateProcessW
CopyFileW
EnterCriticalSection
DecodePointer
HeapReAlloc
HeapSize
ReadConsoleW
GetStringTypeW
SetStdHandle
GetProcessHeap
LocalFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
QueryPerformanceFrequency
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
LeaveCriticalSection
WaitForSingleObjectEx
RemoveDirectoryW
DeleteFileW
MoveFileW
GetCurrentProcessId
SetFileAttributesW
GetFileAttributesW
GetDiskFreeSpaceExW
CreateDirectoryW
GetFileType
FlushFileBuffers
SetEndOfFile
SetFilePointer
ReadFile
GetStdHandle
WriteFile
CloseHandle
SetFileTime
CreateFileW
SetLastError
GetLastError
GetCurrentProcess
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
LCMapStringW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent

user32

CharUpperW
EnableWindow
GetDlgItem
ShowWindow
SetWindowTextW
SetDlgItemTextW
SendMessageW
IsDlgButtonChecked
CheckDlgButton
DialogBoxParamW
GetDlgItemTextW
EndDialog
SendDlgItemMessageW
SetForegroundWindow
LoadIconW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
GetSysColor
LoadStringW
SetWindowLongW
GetClassNameW
GetWindow
GetSystemMetrics
SetWindowPos
GetWindowLongW
GetClientRect
GetWindowRect
SetProcessDefaultLayout
OemToCharA

gdi32

CreateFontW
GetDeviceCaps
DeleteObject

advapi32

RegEnumKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyExW
RegDeleteKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHChangeNotify
SHGetFolderPathW
SHFileOperationW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW

ole32

OleInitialize
CoSetProxyBlanket
CoCreateInstance
OleUninitialize

oleaut32

VariantClear
SysFreeString
SysAllocString

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c443ec60e34fe6ec76cd1229bc418659

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 169KB - Virtual size: 169KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 4KB - Virtual size: 31KB

.rsrc Size: 179KB - Virtual size: 178KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 169KB - Virtual size: 169KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 4KB - Virtual size: 31KB

.rsrc
Size: 179KB - Virtual size: 178KB

.reloc
Size: 9KB - Virtual size: 8KB