97b0a298b70cbb33056e43cd3360a096

Sharing

Copy URL Twitter E-mail

General

Target

97b0a298b70cbb33056e43cd3360a096
Size

313KB
MD5

97b0a298b70cbb33056e43cd3360a096
SHA1

a6ccdae016b8330c0ff44a694b44108f37eea595
SHA256

78167371bd593b20a32902f0e3182d892b047521a1185904305671b6bafd51ab
SHA512

89c7e317b11579e636aa07b3e50d110ec23f0d5e10fedf90543f1d9ca291871ea7337c7adfeef49377eaaa7ec607f05103ee339495a39a49533fbee2014f4f1a
SSDEEP

6144:l24g1A0OvpVXJ8Q0T2c/H+csQMxnw9OoteG7qIEjp/4UQ1Ms:84g1A0OvDJI2c3sQNIotjup91

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97b0a298b70cbb33056e43cd3360a096

Files

97b0a298b70cbb33056e43cd3360a096
.exe windows:5 windows x86 arch:x86

ee82e2a05bfcddba978488d896fc5e7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
LoadLibraryW
TlsAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
CloseHandle
GetTimeZoneInformation
FlushFileBuffers
GetConsoleMode
GetProfileIntA
WriteFile
SetFilePointer
GetOverlappedResult
ExitProcess
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
GetFileType
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleW
CreateFileW
CompareStringW
LocalFree
OutputDebugStringA
WriteProfileStringA
GetProfileStringA
LocalAlloc
LoadLibraryA
TlsGetValue
GetLastError
lstrcatA
HeapCreate
GlobalAlloc
GetCommandLineA
GetProcessHeap
GlobalLock
HeapAlloc
lstrcmpA
GetStdHandle
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCPInfo
SetEnvironmentVariableA
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
GetConsoleCP
GlobalUnlock
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
HeapFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
GetFileSize

user32

GetSystemMetrics
OpenClipboard
GetMenuItemCount
IsWindowVisible
InsertMenuA
SetWindowTextA
LoadImageA
CountClipboardFormats
UpdateWindow
SetClipboardData
SetWindowPos
GetDlgItem
SetClassLongA
FindWindowA
DialogBoxParamA
GetDialogBaseUnits
CheckDlgButton
EndPaint
ClientToScreen
CloseClipboard
GetClassNameA
GetSystemMenu
SetTimer
GetWindowRect
PostQuitMessage
KillTimer
DrawTextA
LoadBitmapA
GetParent
LoadIconA
MessageBeep
wsprintfA
FindWindowExA
WindowFromPoint
GetClientRect
SendMessageA
BeginPaint
GetIconInfo
GetUpdateRect
GetForegroundWindow
GetCursorInfo
GetAsyncKeyState
SetWindowLongA
MessageBoxA
InvalidateRect
BringWindowToTop
GetWindowLongA
EmptyClipboard

gdi32

MoveToEx
BitBlt
LineTo
SetTextColor
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
Ellipse
CreatePen
TextOutW
CreateSolidBrush
TextOutA
GetBitmapBits

advapi32

LsaNtStatusToWinError
LsaFreeMemory
RegCloseKey
LsaQueryInformationPolicy
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoCreateInstance

netapi32

NetLocalGroupEnum
NetApiBufferFree

comctl32

ord17

rpcrt4

RpcErrorStartEnumeration

gdiplus

GdipLoadImageFromFile
GdipDeleteGraphics
GdipDisposeImage
GdipCloneImage
GdipCreateFromHWND
GdipFree
GdipAlloc

uxtheme

CloseThemeData
DrawThemeBackground
GetWindowTheme

authz

AuthzInitializeResourceManager

Sections

.text
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee82e2a05bfcddba978488d896fc5e7e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

netapi32

comctl32

rpcrt4

gdiplus

uxtheme

authz

Sections

.text Size: 255KB - Virtual size: 255KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 10KB - Virtual size: 26KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 255KB - Virtual size: 255KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 10KB - Virtual size: 26KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 10KB - Virtual size: 9KB