bd283cc1442e45b62043f9749b2a910d1f3503acd91c58a6004218bbf723ba05

Sharing

Copy URL

Twitter E-mail

General

Target

bd283cc1442e45b62043f9749b2a910d1f3503acd91c58a6004218bbf723ba05
Size

564KB
MD5

ac32be6c002aea6703d4711e6c1739bf
SHA1

98830e396c437039e8b505b358fc8137ab8dd82e
SHA256

bd283cc1442e45b62043f9749b2a910d1f3503acd91c58a6004218bbf723ba05
SHA512

298793569aba523ad2129b692974ba86c644ad6006d38e42225e1e58649e3a022c1a4f648d0c274b0525c86f408696c9924c08cfbcf133bc46180d2465a453d2
SSDEEP

12288:LckU11uXhNq6+/xqpbh3wTWr8hUkQsWMO:LFUaNWxqBh3SWgSklWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd283cc1442e45b62043f9749b2a910d1f3503acd91c58a6004218bbf723ba05

Files

bd283cc1442e45b62043f9749b2a910d1f3503acd91c58a6004218bbf723ba05
.exe windows:4 windows x86 arch:x86

d04f95463e37f6cce67750fb38d46b07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
MultiByteToWideChar
RtlMoveMemory
LocalSize
lstrcmpiA
GetModuleFileNameA
lstrcmpA
GlobalUnlock
GlobalLock
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
TlsAlloc
GlobalFree
GlobalHandle
GlobalReAlloc
GlobalAlloc
TlsSetValue
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
GetACP
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
LoadLibraryA
LocalAlloc
lstrcpyA
lstrcpynA
GetLastError
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
TerminateThread
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
CloseHandle
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetTickCount
Sleep
SetLastError
GetTimeZoneInformation
LocalReAlloc

ole32

CoTaskMemAlloc

wmvert

wm_CreateWindowFromTemplate
wm_NotifySys
wm_MsgBox
wm_BOr
wm_pbin
wm_Right
wm_Len
wm_InStrRev
wm_PostMessage
wm_ToInt
wm_Left
wm_GetCmdLine
wm_RpSubText
wm_InStr
wm_Split
wm_Destroy
wm_Run
wm_GotoInternet
wm_Sleep
wm_Kill
wm_GetRunPath
wm_UpdateWindow
wm_Str
wm_GetTickCount
wm_pstr

user32

TabbedTextOutA
DrawTextA
GrayStringA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
LoadStringA
GetClassNameA
PtInRect
PostQuitMessage
LoadCursorA
GetSysColorBrush
DestroyMenu
ReleaseDC
GetDC
ClientToScreen
LoadIconA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
MessageBoxA
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
SetWindowTextA
PostMessageA
DispatchMessageA
PeekMessageA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetSystemMetrics
EnableWindow
GetFocus

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
DeleteObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

wsock32

WSAStartup
WSACleanup
select
closesocket
recv
send

wininet

InternetOpenA
InternetSetOptionA
InternetConnectA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCloseHandle

rasapi32

RasGetConnectStatusA
RasHangUpA

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 420KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d04f95463e37f6cce67750fb38d46b07

Headers

File Characteristics

Imports

kernel32

ole32

wmvert

user32

gdi32

winspool.drv

comctl32

wsock32

wininet

rasapi32

Sections

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 420KB - Virtual size: 480KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 420KB - Virtual size: 480KB

.rsrc
Size: 20KB - Virtual size: 19KB