4ebccffcaa5cc4a51fcabe2b4427f9f5765469a6d90331eff5531b5a70aa56cd

Sharing

Copy URL Twitter E-mail

General

Target

4ebccffcaa5cc4a51fcabe2b4427f9f5765469a6d90331eff5531b5a70aa56cd
Size

3.1MB
MD5

f6f3db54d468e13f834825d61b31fd13
SHA1

9dd22f312e73d7a02ba4765e82cc009e43f167a9
SHA256

4ebccffcaa5cc4a51fcabe2b4427f9f5765469a6d90331eff5531b5a70aa56cd
SHA512

6f46414cd60c043f70c9c826e64a18f58e14b6feb877d7219c1d2ab3de749b43db1f49fcc285fe2c7e30841cedc4b67179b8773505458760d007520bce29aeb8
SSDEEP

98304:HFAfEW4JXSIkIX5cpO1Ei8JLi8JfxWWA:H6cJbJZKnRn7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ebccffcaa5cc4a51fcabe2b4427f9f5765469a6d90331eff5531b5a70aa56cd

Files

4ebccffcaa5cc4a51fcabe2b4427f9f5765469a6d90331eff5531b5a70aa56cd
.exe windows:5 windows x86 arch:x86

c8377f636513ea0d281c7809c11bdfed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
UnmapViewOfFile
LocalFileTimeToFileTime
GetCurrentDirectoryW
GetFileAttributesW
SetFileTime
SystemTimeToFileTime
GetCurrentThreadId
TerminateThread
GetFileAttributesExW
GetModuleHandleA
GlobalUnlock
GetStartupInfoW
CreateFileW
GetModuleFileNameW
ReadFile
LoadLibraryW
GlobalAlloc
WriteFile
GlobalLock
CreateDirectoryW
InterlockedDecrement
GetLocalTime
SetFilePointer
GetFileSize
GetProcAddress
TerminateProcess
GetModuleHandleW
GetCurrentProcess
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetModuleFileNameA
GetStringTypeA
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
CreateSemaphoreA
DeleteFileW
DeleteCriticalSection
FindNextFileW
RemoveDirectoryW
FindClose
EnterCriticalSection
GetLastError
LeaveCriticalSection
FlushFileBuffers
GetConsoleMode
GetConsoleCP
VirtualAlloc
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsValidCodePage
GetOEMCP
ExitProcess
CopyFileW
InitializeCriticalSection
FindFirstFileW
LockResource
SizeofResource
LoadResource
FindResourceW
FreeResource
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
Sleep
GetACP
MulDiv
HeapFree
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
HeapAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize

user32

IsIconic
GetWindowRect
ScreenToClient
SetWindowRgn
GetMonitorInfoW
GetSystemMetrics
SetWindowLongW
MessageBoxW
FindWindowW
wsprintfW
MonitorFromWindow
PtInRect
IsZoomed
DefWindowProcW
CreateWindowExW
PostQuitMessage
DispatchMessageW
TranslateMessage
SetFocus
GetMessageW
EnableWindow
GetWindow
GetParent
SendMessageW
RegisterClassW
LoadCursorW
RegisterClassExW
GetClassInfoExW
CallWindowProcW
GetPropW
SetWindowPos
ReleaseDC
DestroyWindow
GetDC
KillTimer
PostMessageW
GetKeyState
GetFocus
GetCursorPos
MapWindowPoints
IntersectRect
IsWindowVisible
GetUpdateRect
IsRectEmpty
EndPaint
BeginPaint
GetActiveWindow
UnionRect
InvalidateRect
SetCapture
ReleaseCapture
CharNextW
OffsetRect
wvsprintfW
SetCursor
FillRect
DrawTextW
CharPrevW
SetRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
ClientToScreen
GetSysColor
GetCaretBlinkTime
TrackPopupMenu
SetForegroundWindow
AppendMenuW
CreatePopupMenu
InvalidateRgn
CreateAcceleratorTableW
GetGUIThreadInfo
MoveWindow
SetWindowTextW
GetWindowTextW
GetClientRect
SetTimer
GetWindowLongW
ShowWindow
SetPropW
GetWindowTextLengthW
IsWindow

gdi32

CreateFontIndirectW
SetWindowOrgEx
GetStockObject
SaveDC
BitBlt
RestoreDC
GetTextMetricsW
DeleteDC
CreatePen
SetBkColor
ExtSelectClipRgn
GdiFlush
CreatePatternBrush
Rectangle
GetObjectW
DeleteObject
CreateRoundRectRgn
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetCharABCWidthsW
GetObjectA
SelectClipRgn
CombineRgn
CreateRectRgnIndirect
GetClipBox
CreateDIBSection
StretchBlt
SetStretchBltMode
CreateSolidBrush
LineTo
MoveToEx
CreatePenIndirect
RoundRect
SetTextColor
SetBkMode
TextOutW
GetTextExtentPoint32W
GetDeviceCaps

comdlg32

GetOpenFileNameW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

ShellExecuteW

ole32

CLSIDFromString
CLSIDFromProgID
OleLockRunning
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantInit
SysFreeString
VariantClear
SysAllocString

gdiplus

GdipGetImageHeight
GdipFree
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipAlloc
GdipGetImageWidth
GdipSetInterpolationMode
GdipCloneImage
GdipRotateWorldTransform
GdipDrawImageRect
GdipDrawLine
GdipFillRectangleI
GdipCreatePen2
GdipTranslateWorldTransform
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipAddPathArcI
GdiplusStartup
GdiplusShutdown
GdipDeletePath
GdipDeleteRegion
GdipDeleteBrush
GdipFillRegion
GdipSetPathGradientFocusScales
GdipSetPathGradientCenterColor
GdipCombineRegionRegion
GdipCreateRegionPath
GdipCreateRegionRect
GdipAddPathLineI
GdipSetSolidFillColor
GdipCreatePath
GdipSetPageUnit
GdipCreateFromHDC
GdipCloneBrush
GdipCreatePathGradientFromPath
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateStringFormat
GdipSetTextRenderingHint
GdipCreateSolidFill
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFontFamily
GdipDrawImage
GdipGraphicsClear
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipCreateLineBrushI
GdipGetFamily
GdipDrawImageI
GdipDeletePen
GdipSetPenEndCap
GdipSetPenStartCap

shlwapi

PathIsDirectoryW

comctl32

_TrackMouseEvent
ord17

imm32

ImmSetCompositionFontW
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

Sections

.text
Size: 750KB - Virtual size: 750KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8377f636513ea0d281c7809c11bdfed

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

gdiplus

shlwapi

comctl32

imm32

Sections

.text Size: 750KB - Virtual size: 750KB

.rdata Size: 138KB - Virtual size: 138KB

.data Size: 10KB - Virtual size: 19KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.reloc Size: 42KB - Virtual size: 41KB

.text
Size: 750KB - Virtual size: 750KB

.rdata
Size: 138KB - Virtual size: 138KB

.data
Size: 10KB - Virtual size: 19KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 42KB - Virtual size: 41KB