ba62271024e02cd6edec470c7966f110

Sharing

Copy URL Twitter E-mail

General

Target

ba62271024e02cd6edec470c7966f110
Size

276KB
MD5

ba62271024e02cd6edec470c7966f110
SHA1

0fb7465d578b94e3ca6bd194f2dc8114b8e03fa3
SHA256

006a643e6a4d6c9b59e5b2049572f159c584221b252c3369e876858f1396ec85
SHA512

fcce984807e733f11aeb3e6898cd5a3e271307e44f69878a7c8eb988e0d03bdce50e12f7511edcf2da660b47cd532a5a30fe50caae23077a4a95073f205bb087
SSDEEP

6144:E0jnqkP+S3K2BQjbv4/4qpRwV9voYsLmOVxkLU0C:njqA3KIQPv4/mV9vtOVxcU0C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba62271024e02cd6edec470c7966f110

Files

ba62271024e02cd6edec470c7966f110
.exe windows:4 windows x86 arch:x86

6b0360b95df060b20a2ab2e75994cd7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
RaiseException
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetProcAddress
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetFileAttributesA
GetWindowsDirectoryA
GetLastError
CreateProcessA
GetVersion
GlobalAddAtomA
GlobalGetAtomNameA
GlobalUnlock
lstrcpynA
GlobalLock
lstrlenA
lstrcpyA
lstrcatA
LoadResource
lstrcmpiA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalFree
ExitProcess
GetCommandLineA
FileTimeToLocalFileTime
GetModuleHandleA
RtlUnwind
FileTimeToSystemTime
SetErrorMode
GetFileSize
SystemTimeToFileTime
LocalFileTimeToFileTime
GetThreadLocale
GetModuleFileNameA
GetShortPathNameA
FindFirstFileA
GetStringTypeExA
GetVolumeInformationA
MoveFileA
FindClose
DeleteFileA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
WritePrivateProfileStringA
DuplicateHandle
LockResource
GetVersionExA
LoadLibraryA
WaitForSingleObject
FreeLibrary
FindResourceA
SetLastError
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
MulDiv
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
CloseHandle
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetLocaleInfoA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr

user32

CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
EnableMenuItem
LoadStringA
PostQuitMessage
ShowOwnedPopups
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
ClientToScreen
LoadCursorA
GetSysColorBrush
FindWindowA
CharUpperA
DestroyIcon
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
DispatchMessageA
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
SetWindowTextA
GetWindowTextA
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
EndDialog
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
BringWindowToTop
IsWindowVisible
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
InvalidateRect
SetWindowLongA
wsprintfA
GetKeyState
SetWindowPos
GetDlgCtrlID
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
GetMenu
LoadIconA
GetClassInfoA
LoadMenuA
SetFocus
GetParent
GetActiveWindow
ShowWindow
GetWindowLongA
IsWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
EnableWindow
WaitForInputIdle
MessageBoxA
SendMessageA
GetClientRect
UpdateWindow
GetLastActivePopup
PostMessageA
DestroyMenu
IsDialogMessageA
RegisterClassA
SetForegroundWindow
GetForegroundWindow
GetNextDlgTabItem
GetWindowRect
GetPropA
WindowFromPoint
UnregisterClassA

gdi32

CreateBitmap
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateFontA
SetBkColor
DeleteObject
SetTextColor
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetObjectA
DeleteDC

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueA
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA

shell32

SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b0360b95df060b20a2ab2e75994cd7c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 116KB - Virtual size: 116KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 116KB - Virtual size: 116KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 108KB - Virtual size: 108KB