ca9153c2e50d59bd3aa4666d15d6e8a0

Sharing

Copy URL Twitter E-mail

General

Target

ca9153c2e50d59bd3aa4666d15d6e8a0
Size

224KB
MD5

ca9153c2e50d59bd3aa4666d15d6e8a0
SHA1

1530baf1550f592d3e05e35a8abade798a83940c
SHA256

14b5be7933beb5136a985f1955a1c8ac984b2c7f7d1443f01131570963bcf396
SHA512

4c8cfb307d49698dee637652db2a641892b29eed489fe3de807e3794ad58f130c6792d745394877f5f2d66564fe3ee2a51abb056987bb6c9f66723638a52d2d1
SSDEEP

6144:T/81eeaYnypK8S/j+cU6Plwttaim+3yJ:TSqYnBbAfaim+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca9153c2e50d59bd3aa4666d15d6e8a0

Files

ca9153c2e50d59bd3aa4666d15d6e8a0
.exe windows:4 windows x86 arch:x86

7002e15d10c0a1f9301228e3b46e1e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyA
WideCharToMultiByte
FormatMessageA
GetCurrentThread
Sleep
HeapDestroy
SetHandleCount
SetEnvironmentVariableA
LocalFree
LocalHandle
GetVersionExA
MultiByteToWideChar
lstrcmpiA
lstrlenA
GetLastError
GetFullPathNameA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
MapViewOfFile
CreateFileMappingA
CloseHandle
GetFileSize
CreateFileA
UnmapViewOfFile
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
CreateThread
CreateEventA
SetEvent
lstrlenW
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
GetCommandLineA
GetVersion
ExitProcess
FatalAppExitA
GetLocaleInfoW
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
CompareStringW
HeapCreate
VirtualFree
RtlUnwind
WriteFile
CompareStringA
VirtualAlloc
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
SetFilePointer
ReadFile
GetTimeZoneInformation

user32

GetMessageA
GetActiveWindow
DispatchMessageA
GetWindowLongA
PostQuitMessage
LoadStringA
wsprintfA
CharToOemBuffA
DefWindowProcA
SetWindowLongA
CreateWindowExA
GetClassInfoA
RegisterClassA
KillTimer
SetTimer
IsWindowVisible
CharNextA
EnumThreadWindows
PostMessageA

urlmon

CreateURLMoniker

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

ole32

CoUninitialize
CreateBindCtx
MkParseDisplayName
CLSIDFromProgID
CoInitialize
CLSIDFromString
CoCreateInstance

oleaut32

VariantChangeType
LoadRegTypeLi
LoadTypeLi
SysFreeString
SysAllocString
CreateErrorInfo
SetErrorInfo
SysAllocStringLen
VariantClear
SafeArrayGetElement
VariantInit
SafeArrayDestroy
SafeArrayPutElement
SysStringLen
SafeArrayGetUBound
SafeArrayCreate

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7002e15d10c0a1f9301228e3b46e1e2f

Headers

File Characteristics

Imports

kernel32

user32

urlmon

version

advapi32

ole32

oleaut32

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 120KB - Virtual size: 120KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 120KB - Virtual size: 120KB