7f2821e7dc62150e7a01b798d636756d6d1bdb659c3c01bf76346c4e230b0011

Sharing

Copy URL Twitter E-mail

General

Target

7f2821e7dc62150e7a01b798d636756d6d1bdb659c3c01bf76346c4e230b0011
Size

564KB
MD5

942b5e4f55c38b97fe4afe367aa2f1fb
SHA1

c39493bb8ee92ac986f3faa5971ba104b7a1f483
SHA256

7f2821e7dc62150e7a01b798d636756d6d1bdb659c3c01bf76346c4e230b0011
SHA512

9f90650bacf84da50f749e516e6d706071c1dc2ea888577bff6a18c3524b246450decc20b4f8532e54bee7d71e0a107d357e3185b2bb9d39880a3b8ec869e592
SSDEEP

6144:eih5PMfGxdWhNbznXbkZ+/XaqaqpblD3wTW7Xe4Ohp6u9urP7omhoYkWClCbt:eaefGShNz6+/Uqpbh3wTWr8hUkQsWsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f2821e7dc62150e7a01b798d636756d6d1bdb659c3c01bf76346c4e230b0011

Files

7f2821e7dc62150e7a01b798d636756d6d1bdb659c3c01bf76346c4e230b0011
.exe windows:4 windows x86 arch:x86

87e5b44c68d9ab5af891f5bbf2644b93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrcmpA
GlobalUnlock
GlobalLock
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
TlsAlloc
GlobalFree
GlobalHandle
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
GetACP
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameA
lstrcmpiA
GetProcAddress
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
LoadLibraryA
LocalAlloc
lstrcpyA
lstrcpynA
GetLastError
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
TerminateThread
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
CloseHandle
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetTickCount
Sleep
SetLastError
GetTimeZoneInformation

wmvert

wm_MsgBox
wm_NotifySys
wm_CreateWindowFromTemplate
wm_pbin
wm_Str
wm_Right
wm_Len
wm_InStrRev
wm_pstr
wm_ToInt
wm_Left
wm_GetCmdLine
wm_RpSubText
wm_InStr
wm_Split
wm_Destroy
wm_Run
wm_GotoInternet
wm_GetTickCount
wm_Sleep
wm_Kill
wm_GetRunPath
wm_UpdateWindow
wm_BOr
wm_PostMessage

user32

TabbedTextOutA
DrawTextA
GrayStringA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
LoadStringA
GetClassNameA
PtInRect
PostQuitMessage
LoadCursorA
GetSysColorBrush
DestroyMenu
ReleaseDC
GetDC
ClientToScreen
LoadIconA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
MessageBoxA
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetSystemMetrics
EnableWindow
PeekMessageA
DispatchMessageA
PostMessageA
SetWindowTextA
GetWindowLongA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comctl32

ord17

wsock32

send
recv
WSAStartup
WSACleanup
select
closesocket

wininet

InternetConnectA
InternetSetOptionA
InternetCloseHandle
InternetOpenA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA

rasapi32

RasHangUpA
RasGetConnectStatusA

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 420KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87e5b44c68d9ab5af891f5bbf2644b93

Headers

File Characteristics

Imports

kernel32

wmvert

user32

gdi32

winspool.drv

comctl32

wsock32

wininet

rasapi32

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 420KB - Virtual size: 480KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 420KB - Virtual size: 480KB

.rsrc
Size: 20KB - Virtual size: 19KB