b7704292f2880c30ece793b9e1f8b262fd4ea5db95d8ab1150aa8dcb8f955cd7

Sharing

Copy URL Twitter E-mail

General

Target

b7704292f2880c30ece793b9e1f8b262fd4ea5db95d8ab1150aa8dcb8f955cd7
Size

812KB
MD5

8572d25c2a5f5f644a613f54c3359341
SHA1

91f22c671f667b3452a8fb36f2fc009710fadb34
SHA256

b7704292f2880c30ece793b9e1f8b262fd4ea5db95d8ab1150aa8dcb8f955cd7
SHA512

d5e75c300f5dea44a222ca4df7c734e4eaeb29aad40af81cacac75574693f332efccb3e71a05aa1069299fd1e05b271d5ebecbb6a94c73680f7b2c81715ab7fb
SSDEEP

24576:fkaa9NibYp2CPH0hQDkatOof8i3J/wyV:/UeLCH0h2FIXyV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7704292f2880c30ece793b9e1f8b262fd4ea5db95d8ab1150aa8dcb8f955cd7

Files

b7704292f2880c30ece793b9e1f8b262fd4ea5db95d8ab1150aa8dcb8f955cd7
.exe windows:4 windows x86

b899e7bdf66bfd2e7a8ab945c453e066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
VirtualProtect
GetDriveTypeW
GetTempFileNameW
MulDiv
GetLocalTime
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
CreateMutexW
GetLastError
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileExW
Module32FirstW
CreateEventW
TerminateProcess
WaitForSingleObject
GetTickCount
GetExitCodeThread
SetEvent
GetPrivateProfileStringW
GetPrivateProfileIntW
GetLogicalDrives
WriteFile
FreeResource
GetLogicalDriveStringsW
MultiByteToWideChar
FindClose
FindFirstFileW
GetFullPathNameW
SetLastError
FindNextFileW
DeleteFileW
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
SetConsoleCtrlHandler
LoadLibraryA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RemoveDirectoryW
IsBadReadPtr
SetUnhandledExceptionFilter
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
FatalAppExitA
HeapSize
GetCurrentThread
RaiseException
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
ExitThread
CreateThread
HeapReAlloc
WideCharToMultiByte
RtlUnwind
LoadLibraryExW
SystemTimeToFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
TlsGetValue
OpenThread
GetDiskFreeSpaceExW
GetModuleHandleW
GetProcAddress
GetCommandLineW
GetCurrentProcess
FlushInstructionCache
lstrlenA
OutputDebugStringW
DebugBreak
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetTempPathW
Sleep
GetVersionExW
EnterCriticalSection
GetCurrentThreadId
InterlockedDecrement
LeaveCriticalSection
GetCurrentProcessId
CreateFileW
DeviceIoControl
GetModuleFileNameW
CloseHandle
TlsSetValue
GetEnvironmentVariableW
GetProcessHeap
HeapAlloc
TlsAlloc
SetEnvironmentVariableW
ReleaseMutex
TlsFree
HeapFree
SetFilePointer
ReadFile
GetFileType
GetSystemTimeAsFileTime
CreateFileA
LoadLibraryW
FormatMessageW
GetSystemTime
LocalFree
FreeLibrary
InterlockedIncrement
lstrlenW
IsBadCodePtr

user32

SetWindowPos
CreateDialogParamW
PeekMessageW
ShowWindow
IsWindow
MessageBoxW
DestroyWindow
wvsprintfW
CharNextW
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
GetClassInfoExW
RegisterClassExW
DefWindowProcW
LoadCursorW
LoadStringW
IsIconic
GetDesktopWindow
ClientToScreen
AdjustWindowRectEx
GetDlgCtrlID
CallWindowProcW
EnableWindow
SetCursor
InflateRect
OffsetRect
IsWindowEnabled
EndDialog
GetActiveWindow
DialogBoxParamW
BringWindowToTop
LoadIconW
ScreenToClient
SetWindowRgn
PostQuitMessage
GetParent
GetWindow
SystemParametersInfoW
GetSystemMetrics
LoadImageW
GetClassNameW
IsDialogMessageW
CreateWindowExW
wsprintfW
SetTimer
PostMessageW
KillTimer
FindWindowExW
GetWindowThreadProcessId
FindWindowW
GetDC
ReleaseDC
GetClientRect
GetWindowLongW
IsWindowVisible
GetWindowRect
MapWindowPoints
InvalidateRect
RedrawWindow
BeginPaint
EndPaint
GetFocus
SetFocus
MoveWindow
SendMessageW
GetWindowTextW
SetWindowTextW
GetDlgItem

gdi32

SaveDC
OffsetViewportOrgEx
RestoreDC
Rectangle
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetViewportOrgEx
BitBlt
DeleteObject
DeleteDC
GetTextMetricsA
GetStockObject
CreatePen
CreateFontW
GetTextExtentPointA
GetDeviceCaps
EnumFontFamiliesW
CreateRoundRectRgn

advapi32

RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
SHBrowseForFolderW
Shell_NotifyIconW
ord165
SHAppBarMessage
SHGetSpecialFolderPathW

ole32

CoCreateGuid
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantClear

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

InternetGetConnectedState
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetCloseHandle
InternetConnectW
InternetOpenW

iphlpapi

GetIpAddrTable
GetAdaptersInfo

setupapi

SetupIterateCabinetW

shlwapi

PathCombineW
PathRemoveFileSpecW
PathIsRelativeW
PathAppendW
PathFindFileNameW
PathIsPrefixW
SHGetValueW
StrToIntExW
SHGetValueA
SHSetValueA
PathFileExistsW
StrCmpW

netapi32

Netbios

Sections

.text
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b899e7bdf66bfd2e7a8ab945c453e066

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

version

wininet

iphlpapi

setupapi

shlwapi

netapi32

Sections

.text Size: 304KB - Virtual size: 301KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 28KB - Virtual size: 34KB

.rsrc Size: 444KB - Virtual size: 444KB

.text
Size: 304KB - Virtual size: 301KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 28KB - Virtual size: 34KB

.rsrc
Size: 444KB - Virtual size: 444KB