783f600928449440f4f8df382d181870

Sharing

Copy URL Twitter E-mail

General

Target

783f600928449440f4f8df382d181870
Size

228KB
MD5

783f600928449440f4f8df382d181870
SHA1

33ae868e4148941e2251e28785be34f310952e66
SHA256

348f8d615db77cf29c3d4da235aca54af9a969c8468bb669a8782b61e29a88a2
SHA512

eea7103ea10512750074687a250a095e107c15d778ac38c7c0b526a1bcfa60821baed16d07b77dcf8df1443ff4dd70fb00e60e9b77b28cfb42a27b10647caae0
SSDEEP

3072:r820RYn2ws/bJpRpC+bRO2W8T6Cpjq54LPar5bqcM0Nm/P7jJu9GcXCv4x2LvluB:MzTrTCOlW8OCjq54uVbP4/zd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
783f600928449440f4f8df382d181870

Files

783f600928449440f4f8df382d181870
.exe windows:4 windows x86 arch:x86

fdfcc21274016830f875d04c8cf7f3f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sfcdll

_SfcDll_DeleteFileData@8
_FileType_Restore@8
_VDF_Close@8
_VDF_LoadFiles@0
_Folder_GetFlags@8
_FileType_Add@8
_FileType_Link@8
_VDF_LoadFoldersTypesCabs@0
_Folder_SetFlags@8
_VDF_Open@8
_File_AddHere@40
_Folder_Remove@8
_FileType_Remove@8
_File_GetType@8
_Folder_Add@12
_File_GetNext@16
_FileType_GetFlags@8
_File_Updated@4
_File_Remove@4
_FileType_LookUp@12
_LDID_GetPath@12
_SfcDll_UpdateFileData@36
_File_UpdateInfo@32
_CAB_GetName@12
_Folder_GetNext@20
_File_LookUp@16
_Folder_GetName@12
_FileType_GetFolder@8
_FileType_GetNext@20

kernel32

GetFileType
GetTimeFormatA
VirtualAlloc
GetDateFormatA
HeapFree
VirtualFree
HeapAlloc
HeapDestroy
GetStdHandle
HeapCreate
GetCommandLineA
GetVersion
GetStartupInfoA
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
TerminateProcess
GetCurrentProcess
SetCurrentDirectoryA
GetCurrentDirectoryA
_lclose
LocalFree
_lread
LocalAlloc
GetFileSize
_lopen
lstrcpynA
lstrlenA
FileTimeToLocalFileTime
FindClose
FindFirstFileA
lstrcpyA
DeleteFileA
lstrcmpiA
GetLastError
CopyFileA
MultiByteToWideChar
MoveFileA
GetTempFileNameA
FindNextFileA
SetFileAttributesA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
WriteFile
SetFilePointer
GetTempPathA
ReadFile
SetLastError
lstrcmpA
FileTimeToDosDateTime
lstrcatA
MoveFileExA
ExitProcess
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetWindowsDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
FormatMessageA
GetModuleHandleA
GetLocalTime
IsDBCSLeadByte
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetShortPathNameA
GetEnvironmentStringsW
GetDriveTypeA
RemoveDirectoryA
CreateDirectoryA
DeviceIoControl
GetSystemDirectoryA
GetACP
GetCPInfo
FreeEnvironmentStringsA
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
RtlUnwind
GetModuleFileNameA
GetOEMCP
UnhandledExceptionFilter

user32

GetSystemMenu
PeekMessageA
MessageBoxA
DeleteMenu
AppendMenuA
DestroyWindow
EnableWindow
PostQuitMessage
DefDlgProcA
LoadImageA
RegisterClassExA
CreateDialogParamA
PostMessageA
GetMessageA
TranslateMessage
GetWindowLongA
GetClientRect
DispatchMessageA
WinHelpA
LoadIconA
KillTimer
SetTimer
IsDlgButtonChecked
IsDialogMessageA
CheckDlgButton
ExitWindowsEx
GetSystemMetrics
CharPrevA
FindWindowA
IsIconic
BringWindowToTop
GetLastActivePopup
ShowWindow
SetForegroundWindow
LoadCursorA
SetCursor
wsprintfA
CheckRadioButton
SetFocus
MessageBeep
SetWindowTextA
EndDialog
DialogBoxParamA
GetWindowTextLengthA
GetWindowTextA
SetWindowLongA
GetParent
SendMessageA
CharNextA
GetActiveWindow
GetDlgItem
LoadStringA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

ShellAboutA
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA

comctl32

PropertySheetA
ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdfcc21274016830f875d04c8cf7f3f6

Headers

File Characteristics

Imports

sfcdll

kernel32

user32

comdlg32

advapi32

shell32

comctl32

version

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 120KB - Virtual size: 118KB

.idata Size: 8KB - Virtual size: 5KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 120KB - Virtual size: 118KB

.idata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 40KB - Virtual size: 39KB