00226fbc4e74031e46d82c64e63da6a7

Sharing

Copy URL

Twitter E-mail

General

Target

00226fbc4e74031e46d82c64e63da6a7
Size

355KB
MD5

00226fbc4e74031e46d82c64e63da6a7
SHA1

f45ac11a9aa9261dac3deb9f6a6cd17af54e6bd7
SHA256

47c55e25f6d8c3feedd55823fc778b112e021877281e95f71fdd3d57b8fa6d57
SHA512

fd30930118b0c6e02de986f6c829e7eb479390e3a76ae1ec86a074b5c5dfe9cbd3f7e6422d6c89b5fdc0f115a5d534f11ef78ba50e3e18d3c56bdb507dc1c55d
SSDEEP

6144:lssGHX2btub+F8U2+sklOCz/yq+cqoGU0lzAA7whWtxIT951Pal4ySQw:+s7tY+GU2JCh+4G/lzzM4txkRMw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00226fbc4e74031e46d82c64e63da6a7

Files

00226fbc4e74031e46d82c64e63da6a7
.exe windows:4 windows x86 arch:x86

d3ac5d6a7ee833d55f3bdf75bae4b975

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocStringByteLen
SysFreeString

kernel32

ResetEvent
LCMapStringA
SetEndOfFile
TerminateThread
GetCurrentDirectoryA
LoadLibraryExA
SetEnvironmentVariableA
HeapReAlloc
GetSystemInfo
VirtualProtect
CompareStringW
WriteFile
GetFileType
CreateFileA
CreateEventA
MapViewOfFile
GetComputerNameA
WideCharToMultiByte
RaiseException
SetHandleCount
TlsSetValue
IsBadCodePtr
GetExitCodeThread
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
CreateThread
FileTimeToSystemTime
CompareFileTime
CreateMutexA
TlsFree
SetLastError
LocalFileTimeToFileTime
DeleteCriticalSection
ReadFile
OpenMutexA
CloseHandle
SetFilePointer
GetLocalTime
ResumeThread
FlushFileBuffers
VirtualQuery
RtlUnwind
CompareStringA
SystemTimeToFileTime
SetUnhandledExceptionFilter
CreateFileMappingA
HeapDestroy
TlsGetValue
GetSystemTimeAsFileTime
ReleaseMutex
LCMapStringW
HeapFree
UnmapViewOfFile
GetACP
PulseEvent
WaitForSingleObject
ExitThread
GetTimeZoneInformation
WaitForMultipleObjects
HeapSize
LeaveCriticalSection
VirtualAlloc
SetStdHandle
GetModuleHandleA
GetCurrentThreadId
EnterCriticalSection
TlsAlloc
FreeLibrary
UnhandledExceptionFilter
GetStdHandle
GetCommandLineA
VirtualFree
HeapAlloc
SetErrorMode
VirtualAllocEx

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize

advapi32

InitializeSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSidLengthRequired
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
GetSidSubAuthority
IsValidSecurityDescriptor
GetUserNameA
RegOpenKeyExA
InitializeAcl

user32

wsprintfA

cmutil

CmAtolA
CmLoadImageW
CmStrchrA
MakeBold
GetOSMajorVersion
CmLoadSmallIconW
CmLoadSmallIconA

printui

PrinterPropPageProvider
DocumentPropertiesWrap

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3ac5d6a7ee833d55f3bdf75bae4b975

Headers

File Characteristics

Imports

oleaut32

kernel32

ole32

advapi32

user32

cmutil

printui

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 328KB - Virtual size: 1.1MB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 328KB - Virtual size: 1.1MB

.rsrc
Size: 512B - Virtual size: 4KB