ed2841b87c6ac0720fbd1ce9ed2c2fc6

Sharing

Copy URL Twitter E-mail

General

Target

ed2841b87c6ac0720fbd1ce9ed2c2fc6
Size

408KB
MD5

ed2841b87c6ac0720fbd1ce9ed2c2fc6
SHA1

cc2f1f260bd880171693fe6f0984d8d387cff5f9
SHA256

e66d0b697ea0c1c769d689a93d7ece4a8e449e2a8d4fa44d2716eb4ff3bb00eb
SHA512

c0d0dbcf2f562f9d04c8d7a5eedad26f85e09b733d31ef9f0b9e58e62f27ace9cd8cd7eef59f1450f5384da0f1da87eb21516a2aa6c836d29886d569c3ef55bb
SSDEEP

12288:SvpgPxTN3xxgtWhZRqVyuA5F+I7K+TLUPY:SAx9x2VymZ+TL6Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed2841b87c6ac0720fbd1ce9ed2c2fc6

Files

ed2841b87c6ac0720fbd1ce9ed2c2fc6
.exe windows:4 windows x86 arch:x86

bf41d925d36d13907098e2174a7cfe5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
GetProcAddress
CreateFileMappingA
GlobalAlloc
IsValidLocale
GetCurrentThreadId
MapViewOfFile
GetVersion
GetStartupInfoA
GetModuleFileNameA
GetCommandLineA
CloseHandle
ExitProcess
GetProfileIntA
GlobalReAlloc
GetTimeZoneInformation
GetFileInformationByHandle
GetTempFileNameA
GetProfileStringA
GetPrivateProfileStringA
LoadLibraryA
GetCurrentDirectoryA
SearchPathA
WinExec
GetModuleHandleA
FreeLibrary
MulDiv
IsDBCSLeadByte
LocalSize
SetEndOfFile
lstrcpynA
SetFilePointer
SetErrorMode
_llseek
_lwrite
SetCurrentDirectoryA
_lcreat
GetLastError
GetUserDefaultLCID
_lread
GetTickCount
_lclose
LocalReAlloc
_lopen
FileTimeToLocalFileTime
GetSystemTime
SystemTimeToFileTime
Sleep
SetFileAttributesA
MoveFileA
VirtualAlloc
CopyFileA
CompareStringA
GetWindowsDirectoryA
VirtualFree
GetTempPathA
GetFileAttributesA
FindNextFileA
GetSystemDirectoryA
FindClose
lstrcmpiA
FindFirstFileA
lstrcatA
DeleteFileA
RtlZeroMemory
GlobalLock
lstrlenA
lstrcpyA
GlobalUnlock
GetFullPathNameA
LocalFree
GlobalFree
RtlMoveMemory
LocalAlloc
GetLogicalDrives
WideCharToMultiByte
MultiByteToWideChar
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
UnhandledExceptionFilter
RtlUnwind
GetEnvironmentStrings

user32

CharNextA
CharPrevA
PtInRect
ShowScrollBar
UpdateWindow
FrameRect
InvalidateRgn
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClassExA
LoadImageA
LoadIconA
RegisterWindowMessageA
LoadCursorA
LoadAcceleratorsA
PostQuitMessage
SetRectEmpty
IsRectEmpty
SystemParametersInfoA
EqualRect
TranslateAcceleratorA
SetMessageQueue
SetCapture
ChildWindowFromPoint
GetMessagePos
EndPaint
BeginPaint
InflateRect
ClientToScreen
SetCursor
GetSysColorBrush
EnumThreadWindows
KillTimer
ReleaseCapture
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
CopyRect
GetMenu
GetSubMenu
GetMenuItemCount
GetKeyState
GetCursorPos
CheckMenuItem
TrackPopupMenu
SetActiveWindow
SetTimer
FillRect
SetRect
InvertRect
CharLowerA
WinHelpA
GetClientRect
IsWindowEnabled
GetWindow
VkKeyScanA
GetClassNameA
DefWindowProcA
RegisterClassA
GetDesktopWindow
CreateWindowExA
UnregisterClassA
CharUpperA
FindWindowA
EnumWindows
CallWindowProcA
GetSystemMetrics
GetSysColor
DrawFocusRect
IsIconic
EndDialog
SendDlgItemMessageA
MessageBoxA
DialogBoxParamA
GetDlgItemTextA
SetDlgItemTextA
GetFocus
LoadBitmapA
ScreenToClient
GetDC
ReleaseDC
ValidateRect
IsDlgButtonChecked
CheckDlgButton
EnumChildWindows
GetWindowRect
InvalidateRect
OffsetRect
SetForegroundWindow
LoadStringA
GetMessageA
GetAsyncKeyState
IsWindow
DestroyWindow
wsprintfA
IsZoomed
ShowWindow
IsWindowVisible
MoveWindow
CreateDialogParamA
PeekMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
GetWindowLongA
SetWindowLongA
SetWindowPos
EnableWindow
SendMessageA
GetDlgItem
SetWindowTextA
SetFocus
GetParent
PostMessageA
GetWindowTextA
EnableMenuItem
CreateMenu
InsertMenuA
DeleteMenu
DrawMenuBar
DestroyMenu
LoadMenuA
SetMenu
GetWindowTextLengthA
IsClipboardFormatAvailable
CreatePopupMenu
AppendMenuA

gdi32

DeleteDC
SelectObject
CreateCompatibleDC
GetObjectA
GetTextExtentPoint32A
SetBkColor
GetTextMetricsA
SetTextColor
GetStockObject
ExtTextOutA
PatBlt
SetPixel
BitBlt
GetDeviceCaps
DeleteMetaFile
CreateCompatibleBitmap
RealizePalette
SelectPalette
CreateDIBitmap
CreateBitmap
SetStretchBltMode
SetDIBits
CreateDiscardableBitmap
RestoreDC
CreateSolidBrush
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
SetMapMode
SaveDC
SetViewportOrgEx
SetWindowOrgEx
CreatePalette
LPtoDP
SetMetaFileBitsEx
SetBkMode
CreateICA
SetROP2
DeleteObject
CreatePen
GetTextColor
SetTextAlign
GetBkColor
GetTextAlign
CreateFontIndirectA
TextOutA
Rectangle
LineTo
GetNearestColor
GetTextExtentPointA
InvertRgn
MoveToEx
SetRectRgn
CreateRectRgn
CombineRgn
IntersectClipRect
CreatePatternBrush
CreateFontA
UnrealizeObject
GetSystemPaletteEntries
SetBrushOrgEx
EndDoc
EndPage
CreateDCA
SetAbortProc
Escape
StartDocA
StretchBlt
StartPage

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf41d925d36d13907098e2174a7cfe5d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 224KB - Virtual size: 220KB

.data Size: 128KB - Virtual size: 125KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 44KB - Virtual size: 43KB

.text
Size: 224KB - Virtual size: 220KB

.data
Size: 128KB - Virtual size: 125KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 44KB - Virtual size: 43KB