16b1370179a52580da3b6aa1ddc62f5e

Sharing

Copy URL

Twitter E-mail

General

Target

16b1370179a52580da3b6aa1ddc62f5e
Size

340KB
MD5

16b1370179a52580da3b6aa1ddc62f5e
SHA1

dcd3842a84aa381eb269a10535b63eebd1060396
SHA256

c618bf504c2dd7be14503819b61d43bc4838cd5f29d8428f4ce9aa2006ed1cda
SHA512

c0976fcbf76e209781514af2bbea6f691f576052a34d3d429ade8bb4d0bf1f1058ff695c667fa999789476eac884e24b029e879c58c1a70a9224222c28f8f0f0
SSDEEP

6144:7k6ESZTnnx6XFur9Rn2abRMHbkVI5znSSUlaGQ+tOZu3G:7k6ESZjUVuCabRMHbtSSUlxQFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b1370179a52580da3b6aa1ddc62f5e

Files

16b1370179a52580da3b6aa1ddc62f5e
.exe windows:4 windows x86 arch:x86

c2fe11254ba7b60d0e5f6b358cfce559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
GetACP
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetTimeZoneInformation
GetStdHandle
RtlUnwind
SetHandleCount
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
GetThreadLocale
GetOEMCP
SizeofResource
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileSize
GetFileTime
FileTimeToLocalFileTime
GetFileAttributesA
GetTickCount
FileTimeToSystemTime
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
FindClose
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
SetErrorMode
GetCurrentProcess
DuplicateHandle
GetFileType
GetCPInfo
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetModuleFileNameA
LCMapStringW
GetProcessVersion
GetLastError
GetProfileStringA
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
MulDiv
SetLastError
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
FormatMessageA
LocalFree
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
CloseHandle
GlobalLock
GlobalAlloc
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
SetStdHandle
SetCurrentDirectoryA

user32

GetNextDlgGroupItem
DestroyMenu
CharUpperA
RegisterClipboardFormatA
SetRect
PostThreadMessageA
GetDesktopWindow
GetClassNameA
WindowFromPoint
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
CharNextA
CopyAcceleratorTableA
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
GetSysColorBrush
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
LoadStringA
GetCapture
IsChild
GetPropA
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
PostMessageA
PostQuitMessage
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
EnableWindow
MessageBeep
LoadCursorA
CopyIcon
GetWindowRect
GetParent
GetDC
ReleaseDC
InflateRect
IsWindow
GetSysColor
SetCursor
PtInRect
ReleaseCapture
InvalidateRect
SetCapture
GetClientRect
SendMessageA
MessageBoxA
UnhookWindowsHookEx
SetPropA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
UnregisterClassA

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
IntersectClipRect
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
SelectObject
SetBkMode
SaveDC
RestoreDC
SetBkColor
SetTextColor
DeleteDC
CreateBitmap
GetClipBox
GetStockObject
GetObjectA
GetTextExtentPoint32A
CreateFontIndirectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

OleInitialize
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

bioschk

ord2
ord1
ord3
ord12

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2fe11254ba7b60d0e5f6b358cfce559

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

bioschk

Sections

.text Size: 144KB - Virtual size: 141KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 36KB - Virtual size: 35KB

.text
Size: 144KB - Virtual size: 141KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 36KB - Virtual size: 35KB