717b73d689b3e9bb029eb3931a5a78a0

Sharing

Copy URL Twitter E-mail

General

Target

717b73d689b3e9bb029eb3931a5a78a0
Size

200KB
MD5

717b73d689b3e9bb029eb3931a5a78a0
SHA1

53a7988fa8d5f460df93ded0097ebce0a295ce49
SHA256

76cb77216d35af160d06c3168ff02d8ed52be3b45442935d3a8f7597fad6a004
SHA512

0522bc2308bd1aa00bba04c6a9ed1fde50b5c88458b58c0888f89512716519293a948c7f130711228408afca88bfcf3097268c6eeb49015bfcc49084e3a6ce5a
SSDEEP

3072:5Z7YzOexZKRQNLXt/cA3rwaTfAe4v2aSLblbSXnAZBaPVP93zajmsH:51yhxZDBJcA37/XlbS3hPlB+j7H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
717b73d689b3e9bb029eb3931a5a78a0

Files

717b73d689b3e9bb029eb3931a5a78a0
.exe windows:4 windows x86 arch:x86

33b0262c0e31183c3fe4409c1c8caf39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileSectionA
WritePrivateProfileStringA
GetLogicalDrives
GetDriveTypeA
lstrlenA
OpenFile
_lread
_lclose
WinExec
ExitThread
GetExitCodeThread
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
MultiByteToWideChar
WaitForSingleObject
CreateThread
CloseHandle
SetErrorMode
ExitProcess
SearchPathA
GetUserDefaultLCID
GetLastError
GetLocaleInfoA
LocalFree
RtlZeroMemory
RtlMoveMemory
GetProcAddress
GetModuleHandleA
InterlockedDecrement
GetCommandLineA
InterlockedIncrement
GetTickCount
LocalAlloc

user32

GetWindowThreadProcessId
IsIconic
FindWindowA
MessageBoxA
SetFocus
GetLastActivePopup
GetForegroundWindow
SetTimer
EnumChildWindows
ReleaseDC
GetDC
EnableMenuItem
SetWindowPos
DispatchMessageA
DefWindowProcA
PostMessageA
DialogBoxParamA
DestroyWindow
SetWindowTextA
GetWindowLongA
KillTimer
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowDC
LoadCursorA
wvsprintfA
CheckMenuItem
DeleteMenu
PostQuitMessage
DefDlgProcA
GetDesktopWindow
LoadIconA
BringWindowToTop
CharUpperBuffA
SetWindowPlacement
GetWindowPlacement
WindowFromPoint
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
TranslateAcceleratorA
GetDlgItemTextA
SetCursor
ScreenToClient
PtInRect
ChildWindowFromPoint
RegisterWindowMessageA
SetCapture
ClientToScreen
GetParent
ReleaseCapture
GetCursorPos
DrawIcon
EndPaint
GetWindowTextA
BeginPaint
PeekMessageA
DrawTextA
SetDlgItemInt
GetDlgItemInt
RedrawWindow
RegisterClassA
CreateDialogParamA
LoadStringA
LoadAcceleratorsA
ShowWindow
UpdateWindow
SetForegroundWindow
GetFocus
LoadBitmapA
EnableWindow
TranslateMessage
GetMessageA
IsDialogMessageA
GetSubMenu
GetMenu
InvalidateRect
GetWindowRect
GetSystemMetrics
wsprintfA
GetDlgCtrlID
CallWindowProcA
CopyRect
DrawFocusRect
RemovePropA
CreateWindowExA
GetDlgItem
SetPropA
SetWindowLongA
GetClientRect
MapWindowPoints
SendMessageA
GetPropA
SetRect
DrawEdge
GetSysColor
IsWindow
WinHelpA
IsWindowVisible

crtdll

_amsg_exit
_XcptFilter
exit
_except_handler2
_exit
_initterm
_acmdln_dll
_commode_dll
_fmode_dll
_aexit_rtn_dll
__GetMainArgs
rand
strchr
strcspn
strspn
strncpy
sscanf
srand

gdi32

SaveDC
IntersectClipRect
RestoreDC
SetTextAlign
GetTextMetricsA
ExtTextOutA
SetBkColor
SelectObject
DeleteObject
CreateBitmap
CreateCompatibleDC
DeleteDC
BitBlt
PatBlt
CreateSolidBrush
SetTextColor
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPoint32A
GetTextExtentPointA
GetStockObject
GetObjectA

comctl32

ord8
CreateToolbarEx
ord6

shell32

DragAcceptFiles
DragQueryFileA
SHGetFileInfoA
DragFinish
ShellAboutA

winmm

mciSendCommandA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA

ole32

CoCreateInstance
OleInitialize
OleUninitialize

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33b0262c0e31183c3fe4409c1c8caf39

Headers

File Characteristics

Imports

kernel32

user32

crtdll

gdi32

comctl32

shell32

winmm

advapi32

ole32

Sections

.text Size: 52KB - Virtual size: 51KB

.sdata Size: 4KB - Virtual size: 4B

.data Size: 4KB - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 4KB

.CRT Size: 4KB - Virtual size: 20B

.rsrc Size: 20KB - Virtual size: 17KB

.reloc Size: 104KB - Virtual size: 104KB

.text
Size: 52KB - Virtual size: 51KB

.sdata
Size: 4KB - Virtual size: 4B

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 4KB

.CRT
Size: 4KB - Virtual size: 20B

.rsrc
Size: 20KB - Virtual size: 17KB

.reloc
Size: 104KB - Virtual size: 104KB