5e411a37eb952e069c6361229e55aa2b6410ba0448a33f46d9dbcfd1a7faf9c8

Sharing

Copy URL Twitter E-mail

General

Target

5e411a37eb952e069c6361229e55aa2b6410ba0448a33f46d9dbcfd1a7faf9c8
Size

564KB
MD5

2299728501113ff61db1a7d358b5c50f
SHA1

41a0715eb8fe0d14bb83047166c462cdcee6cc9e
SHA256

5e411a37eb952e069c6361229e55aa2b6410ba0448a33f46d9dbcfd1a7faf9c8
SHA512

9194fa3bfda3f74aba1f4233edeb0e156aeae193e078ccaef6ed8e502dcaf61d497eb519e292c8db88dc914992641919003358e1d5d4d2057ac3fa4fc3a36550
SSDEEP

6144:W4TZ4ku6mqQ9hNbzAXbkZ+/yaqaqpblD3wTW7Xe4Ohp6u9urP7omhoYkWaICbt:na6mDhNI6+/7qpbh3wTWr8hUkQsWBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e411a37eb952e069c6361229e55aa2b6410ba0448a33f46d9dbcfd1a7faf9c8

Files

5e411a37eb952e069c6361229e55aa2b6410ba0448a33f46d9dbcfd1a7faf9c8
.exe windows:4 windows x86 arch:x86

3e65b96c4382c4860d6172ded10d79c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
MultiByteToWideChar
RtlMoveMemory
LocalSize
lstrcmpiA
GetModuleFileNameA
lstrcmpA
GlobalUnlock
GlobalLock
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
TlsAlloc
GlobalFree
GlobalHandle
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
GetACP
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
LoadLibraryA
LocalAlloc
lstrcpyA
lstrcpynA
GetLastError
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
TerminateThread
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
CloseHandle
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetTickCount
Sleep
SetLastError
GetTimeZoneInformation
GlobalAlloc

wininet

DeleteUrlCacheEntryA
InternetCloseHandle
InternetSetOptionA
InternetConnectA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetOpenA

ole32

CoTaskMemAlloc

wmvert

wm_CreateWindowFromTemplate
wm_NotifySys
wm_BOr
wm_pbin
wm_Right
wm_Len
wm_InStrRev
wm_PostMessage
wm_pstr
wm_ToInt
wm_GetCmdLine
wm_MsgBox
wm_RpSubText
wm_InStr
wm_Split
wm_Destroy
wm_Run
wm_GotoInternet
wm_GetRunPath
wm_UpdateWindow
wm_Str
wm_GetTickCount
wm_Sleep
wm_Kill
wm_Left

user32

TabbedTextOutA
DrawTextA
GrayStringA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
LoadStringA
GetClassNameA
PtInRect
PostQuitMessage
LoadCursorA
GetSysColorBrush
DestroyMenu
ClientToScreen
LoadIconA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
MessageBoxA
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetWindowTextA
PostMessageA
DispatchMessageA
PeekMessageA
GetWindowRect
GetWindowTextA
GetSystemMetrics
EnableWindow
ReleaseDC
GetDC

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
DeleteObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

wsock32

WSAStartup
WSACleanup
select
closesocket
recv
send

rasapi32

RasHangUpA
RasGetConnectStatusA

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 420KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e65b96c4382c4860d6172ded10d79c9

Headers

File Characteristics

Imports

kernel32

wininet

ole32

wmvert

user32

gdi32

winspool.drv

comctl32

wsock32

rasapi32

Sections

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 420KB - Virtual size: 480KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 420KB - Virtual size: 480KB

.rsrc
Size: 20KB - Virtual size: 19KB