9755a5bf048f476e445a874bdad9c540

Sharing

Copy URL Twitter E-mail

General

Target

9755a5bf048f476e445a874bdad9c540
Size

228KB
MD5

9755a5bf048f476e445a874bdad9c540
SHA1

d17e0bce6f859a894df27ee6e2db9696eff13cbb
SHA256

5840ad153dc8893158b5d2518047a933c67655eba61ca12f458649c8118cd665
SHA512

a2f0ce7f82ea6be616cc572c19d284518d89e65ac6528c01558fa62eac7acd89bfff8774ea56d8a3ec74ca46f9c87b29ced7c496ebd92f41f882bfc6253c9dd2
SSDEEP

3072:3pH53teysJC1hcmLNZVEJPgUINtJihDJtTM6vFSj3wYZAJe+yrG:73psJkJqIH0DJu/zwYZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9755a5bf048f476e445a874bdad9c540

Files

9755a5bf048f476e445a874bdad9c540
.exe windows:4 windows x86 arch:x86

edda22d00180e698765440e081c6c93c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

PropertySheetA
ord17

kernel32

lstrlenA
FormatMessageA
lstrcpyA
GetCommandLineA
WideCharToMultiByte
TlsAlloc
RtlUnwind
TlsFree
HeapAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
ReadFile
SetFilePointer
InterlockedDecrement
GetModuleHandleA
IsValidCodePage
IsValidLocale
GetLocaleInfoA
GetStringTypeW
LocalFree
LocalHandle
GetVersionExA
MultiByteToWideChar
lstrcmpiA
GetLastError
GetFullPathNameA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
MapViewOfFile
CreateFileMappingA
CloseHandle
GetFileSize
CreateFileA
UnmapViewOfFile
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
CreateThread
CreateEventA
SetEvent
lstrlenW
HeapFree
EnumSystemLocalesA
GetProcessHeap
HeapReAlloc
InterlockedIncrement
GetStringTypeA
VirtualAlloc
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
SetStdHandle
FlushFileBuffers
SetLastError
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
GetUserDefaultLCID
WriteFile
FatalAppExitA
Sleep
LCMapStringA
LCMapStringW

user32

wsprintfA
PostMessageA
EnumThreadWindows
KillTimer
IsWindowVisible
CharNextA
SetTimer
CreateWindowExA
RegisterClassA
GetClassInfoA
PostQuitMessage
SetWindowLongA
GetDesktopWindow
GetParent
DispatchMessageA
GetMessageA
DialogBoxParamA
EndDialog
GetWindowTextA
GetWindowTextLengthA
wvsprintfA
EnableWindow
SetDlgItemInt
GetDlgItem
SendMessageA
LoadStringA
SetDlgItemTextA
WinHelpA
LoadIconA
MessageBoxA
GetActiveWindow
SetFocus
CheckDlgButton
DefWindowProcA
GetDlgItemInt
GetWindowLongA
IsDlgButtonChecked

urlmon

CreateURLMoniker

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

ole32

CreateBindCtx
CLSIDFromString
CoInitialize
CLSIDFromProgID
MkParseDisplayName
CoUninitialize
CoCreateInstance

oleaut32

SafeArrayCreate
SafeArrayDestroy
SafeArrayPutElement
SafeArrayGetUBound
LoadRegTypeLi
SysAllocStringLen
SetErrorInfo
SysFreeString
CreateErrorInfo
SysAllocString
VariantChangeType
LoadTypeLi
VariantClear
SafeArrayGetElement
VariantInit
SysStringLen

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

edda22d00180e698765440e081c6c93c

Headers

File Characteristics

Imports

comctl32

kernel32

user32

urlmon

version

advapi32

ole32

oleaut32

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 20KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 124KB - Virtual size: 124KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 20KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 124KB - Virtual size: 124KB