2533260e00e07b491d3ef65809c9c1867ea25da8b61fb54b531e64d216a87f8e

Sharing

Copy URL Twitter E-mail

General

Target

2533260e00e07b491d3ef65809c9c1867ea25da8b61fb54b531e64d216a87f8e
Size

564KB
MD5

2482f38b15e2ca3a482dc85e5957ba64
SHA1

134f667dacdfd214a0c72b8aefe88982cec451a6
SHA256

2533260e00e07b491d3ef65809c9c1867ea25da8b61fb54b531e64d216a87f8e
SHA512

98b40024ad51426f5b3060d64ffa1737179aa073301f05366a396a8b2ffdf5c797247000f6ae283e8ca22d39956f16cda47cfd3babf04f5518bf6ab01fb17bc5
SSDEEP

6144:m+kFVrMftFEtFhNbztXbkZ+/CaqaqpblD3wTW7Xe4Ohp6u9urP7omhoYkWDmCbt:mNyfvEThNR6+/Lqpbh3wTWr8hUkQsWaO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2533260e00e07b491d3ef65809c9c1867ea25da8b61fb54b531e64d216a87f8e

Files

2533260e00e07b491d3ef65809c9c1867ea25da8b61fb54b531e64d216a87f8e
.exe windows:4 windows x86 arch:x86

55d702d4f414da68ee0f5aff2ac66f9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
MultiByteToWideChar
LocalSize
lstrcmpiA
GetModuleFileNameA
lstrcmpA
GlobalUnlock
GlobalLock
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
TlsAlloc
GlobalFree
GlobalHandle
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
GetACP
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
LoadLibraryA
LocalAlloc
lstrcpyA
lstrcpynA
GetLastError
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
TerminateThread
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
CloseHandle
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetTickCount
Sleep
SetLastError
GetTimeZoneInformation
TlsGetValue

ole32

CoTaskMemAlloc

wmvert

wm_CreateWindowFromTemplate
wm_NotifySys
wm_MsgBox
wm_BOr
wm_pbin
wm_Right
wm_Len
wm_InStrRev
wm_PostMessage
wm_ToInt
wm_Left
wm_GetCmdLine
wm_RpSubText
wm_InStr
wm_Split
wm_Destroy
wm_Run
wm_GotoInternet
wm_Sleep
wm_Kill
wm_GetRunPath
wm_UpdateWindow
wm_Str
wm_GetTickCount
wm_pstr

user32

TabbedTextOutA
DrawTextA
GrayStringA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
LoadStringA
GetClassNameA
PtInRect
PostQuitMessage
LoadCursorA
GetSysColorBrush
DestroyMenu
ReleaseDC
GetDC
ClientToScreen
LoadIconA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
MessageBoxA
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
SetWindowTextA
PostMessageA
DispatchMessageA
PeekMessageA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetSystemMetrics
EnableWindow
GetSysColor

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

wsock32

WSAStartup
WSACleanup
select
closesocket
recv
send

wininet

InternetOpenA
InternetSetOptionA
InternetConnectA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCloseHandle

rasapi32

RasHangUpA
RasGetConnectStatusA

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 420KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55d702d4f414da68ee0f5aff2ac66f9f

Headers

File Characteristics

Imports

kernel32

ole32

wmvert

user32

gdi32

winspool.drv

comctl32

wsock32

wininet

rasapi32

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 420KB - Virtual size: 480KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 420KB - Virtual size: 480KB

.rsrc
Size: 20KB - Virtual size: 19KB