45bbc0aa9158def0267fa39d261309951fdc97031d9e36a494d8b48bfe33daa7

Sharing

Copy URL Twitter E-mail

General

Target

45bbc0aa9158def0267fa39d261309951fdc97031d9e36a494d8b48bfe33daa7
Size

427KB
MD5

4193887d64cba412ea5787bb3443f01d
SHA1

f5ecf2ec1eed7de17083f15e2001391e0ffcf2d0
SHA256

45bbc0aa9158def0267fa39d261309951fdc97031d9e36a494d8b48bfe33daa7
SHA512

dea79348e4677e3e642f7dac2595beb3d27e34d9fae96c244e74dfa1e61a1d96f80036219885489c29b6b808dd6b0d7d34044f62cea84dfd4281603ea05987c8
SSDEEP

6144:O62bBuPdw050zjSCZaITv1ZIjuJabLuLMA1iwBhvZXQ+/3OKyv1III9YB5hd67Qt:4VllTvEq4FwBhvBJ/+5IISY1AQFRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45bbc0aa9158def0267fa39d261309951fdc97031d9e36a494d8b48bfe33daa7

Files

45bbc0aa9158def0267fa39d261309951fdc97031d9e36a494d8b48bfe33daa7
.exe windows:6 windows x86 arch:x86

ea6d8bf974c83d5d87229f8aded08725

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetModuleFileNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
FindResourceW
LoadLibraryExW
FreeLibrary
ExpandEnvironmentStringsW
GetSystemDirectoryW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
GetCPInfo
IsDBCSLeadByte
GetTempPathW
Sleep
GetShortPathNameW
GetEnvironmentVariableW
GetCommandLineW
MoveFileExW
CreateProcessW
CopyFileW
EnterCriticalSection
DecodePointer
HeapReAlloc
HeapSize
ReadConsoleW
GetStringTypeW
SetStdHandle
GetProcessHeap
LocalFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
QueryPerformanceFrequency
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
LeaveCriticalSection
WaitForSingleObjectEx
RemoveDirectoryW
DeleteFileW
MoveFileW
GetCurrentProcessId
SetFileAttributesW
GetFileAttributesW
GetDiskFreeSpaceExW
CreateDirectoryW
GetFileType
FlushFileBuffers
SetEndOfFile
SetFilePointer
ReadFile
GetStdHandle
WriteFile
CloseHandle
SetFileTime
CreateFileW
SetLastError
GetLastError
GetCurrentProcess
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
LCMapStringW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent

user32

CharUpperW
EnableWindow
GetDlgItem
ShowWindow
SetWindowTextW
SetDlgItemTextW
SendMessageW
IsDlgButtonChecked
CheckDlgButton
DialogBoxParamW
GetDlgItemTextW
EndDialog
SendDlgItemMessageW
SetForegroundWindow
LoadIconW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
GetSysColor
LoadStringW
SetWindowLongW
GetClassNameW
GetWindow
GetSystemMetrics
SetWindowPos
GetWindowLongW
GetClientRect
GetWindowRect
SetProcessDefaultLayout
OemToCharA

gdi32

CreateFontW
GetDeviceCaps
DeleteObject

advapi32

RegEnumKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyExW
RegDeleteKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHChangeNotify
SHGetFolderPathW
SHFileOperationW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW

ole32

OleInitialize
CoSetProxyBlanket
CoCreateInstance
OleUninitialize

oleaut32

VariantClear
SysFreeString
SysAllocString

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea6d8bf974c83d5d87229f8aded08725

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 169KB - Virtual size: 169KB

.rdata Size: 51KB - Virtual size: 51KB

.data Size: 4KB - Virtual size: 31KB

.rsrc Size: 182KB - Virtual size: 182KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 169KB - Virtual size: 169KB

.rdata
Size: 51KB - Virtual size: 51KB

.data
Size: 4KB - Virtual size: 31KB

.rsrc
Size: 182KB - Virtual size: 182KB

.reloc
Size: 9KB - Virtual size: 9KB