3ecd678937540a67a9780ddc56912b1c

Sharing

Copy URL Twitter E-mail

General

Target

3ecd678937540a67a9780ddc56912b1c
Size

237KB
MD5

3ecd678937540a67a9780ddc56912b1c
SHA1

e25d64205f97039b24dc6c55fa1c3d42e16bbee6
SHA256

467fe6438bfd57a9f6dcc0b9de24f38af138b329ff3a0b83b1713a674d0b4b9f
SHA512

b8dce2b165c78829d598cf9ddf8febe0898e10db17de7caf6d9450b98e561b7b3f75f02cacb93fe05d3d721219240bc622d33c72775e3f8cc0b03d62def27f24
SSDEEP

6144:3KuFF5k58rcCmTj0VpCbcR8jxaW35MK9y09:3KYe5VC8j0zCAR45yS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ecd678937540a67a9780ddc56912b1c

Files

3ecd678937540a67a9780ddc56912b1c
.exe windows:4 windows x86 arch:x86

16bfee20d62b44ca6885111677cc6402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
GetFullPathNameA
QueryPerformanceCounter
CreateEventW
LoadLibraryExA
GetTimeFormatW
GetModuleFileNameW
GlobalFindAtomW
lstrcatA
GetCurrentDirectoryW
EnumTimeFormatsA
GetModuleHandleW
OpenEventA
InitializeCriticalSection
GetLongPathNameA
LocalFree
OpenWaitableTimerW
GetExpandedNameA
DeleteAtom
BeginUpdateResourceW
IsBadStringPtrA
GetLogicalDrives
GetEnvironmentVariableA
TlsAlloc
GetExitCodeThread
GetProcAddress
CreateSemaphoreW
GetVolumeInformationA
WaitForSingleObject
IsValidCodePage
FileTimeToDosDateTime
GetCommandLineA
MoveFileW
GetComputerNameA
lstrcpyn
LoadLibraryA
GetNumberFormatA
DuplicateHandle
FatalAppExitW
lstrlenA
GetVersionExA
lstrcatW

user32

CharNextA
LoadMenuA
RegisterWindowMessageA
GetDlgItemTextA
AppendMenuW
GetTopWindow
DialogBoxParamW
WaitMessage
GetClassInfoExA
GetClassInfoA
WaitForInputIdle
GetMenuItemRect
TrackPopupMenuEx
CreatePopupMenu
WinHelpW
AdjustWindowRect
IsMenu
OpenClipboard
SetCursorPos
EmptyClipboard
SetDlgItemInt
GetMenuInfo
GetSysColorBrush
GetMenuStringA
CreateDesktopA
SetWindowPos
CreateMenu
SetFocus
PostQuitMessage
DialogBoxIndirectParamW
CharNextW
SetWindowTextW
MonitorFromWindow
FindWindowW
GetMenuItemID
LoadIconW
EnumClipboardFormats
RemoveMenu
GetActiveWindow
GetKeyboardType
InsertMenuItemA
CreateDialogParamA
CharPrevW
DestroyIcon
LoadBitmapW
GetMenuStringW
WinHelpA
GetSubMenu
SetWindowLongW
GetForegroundWindow
OffsetRect
MoveWindow
GetActiveWindow
SetActiveWindow
MessageBoxW
MessageBoxA
CreateDialogIndirectParamA
RegisterClassExW
GetFocus
mouse_event
CreateAcceleratorTableW
RegisterClassA
SetCapture
MessageBoxIndirectW
InsertMenuA
SetParent
PeekMessageW
GetWindowRgn
TrackPopupMenu
GetClassInfoW
PostMessageA
MonitorFromPoint
RegisterClassW
LoadCursorW
FindWindowA
EndMenu
LoadIconA
EnumWindows
SetDlgItemTextA

gdi32

CreateFontA
GetMetaFileW
GetRasterizerCaps
CreateScalableFontResourceW
CreateICA
CreatePalette
CreateCompatibleDC
GetTextExtentPointA
CreateMetaFileW
GetStockObject
RemoveFontResourceExW
CreateHatchBrush
ExtCreateRegion
CreateScalableFontResourceA
RemoveFontResourceW
CreateColorSpaceA
CreateBrushIndirect
StretchDIBits
SelectBrushLocal
GetEnhMetaFileW
SetWinMetaFileBits
AddFontResourceW
GdiGetBatchLimit
CreateFontIndirectA

advapi32

DeleteService
CryptGenRandom
RegReplaceKeyA
MapGenericMask
GetSecurityInfo
AddAuditAccessAce
GetInformationCodeAuthzLevelW
AccessCheckByTypeResultListAndAuditAlarmByHandleW
CryptSetProvParam
CredEnumerateA
SetSecurityDescriptorGroup
ElfOldestRecord
ChangeServiceConfig2A
RegQueryValueA
CredReadDomainCredentialsA

shell32

StrRStrA
ExtractIconW
SHGetDiskFreeSpaceExA
ExtractIconA
StrRChrW
SHGetDiskFreeSpaceA
FreeIconList
Shell_NotifyIcon
ShellExecuteA
SHGetFolderLocation
DuplicateIcon
StrCmpNW
StrStrW
StrChrIA
ExtractAssociatedIconW
Shell_NotifyIconA

oleaut32

VarI8FromUI1
VarBstrFromBool

ws2_32

socket

Sections

.rpEPMN
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DhXX
Size: 2KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vQPpJ
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FpRL
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BFJtgY
Size: 5KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.EPcCp
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hQm
Size: 11KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DML
Size: 1024B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16bfee20d62b44ca6885111677cc6402

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

ws2_32

Sections

.rpEPMN Size: 8KB - Virtual size: 8KB

.DhXX Size: 2KB - Virtual size: 206KB

.vQPpJ Size: 89KB - Virtual size: 88KB

.FpRL Size: 12KB - Virtual size: 12KB

.BFJtgY Size: 5KB - Virtual size: 19KB

.EPcCp Size: 91KB - Virtual size: 91KB

.hQm Size: 11KB - Virtual size: 116KB

.DML Size: 1024B - Virtual size: 415KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.rpEPMN
Size: 8KB - Virtual size: 8KB

.DhXX
Size: 2KB - Virtual size: 206KB

.vQPpJ
Size: 89KB - Virtual size: 88KB

.FpRL
Size: 12KB - Virtual size: 12KB

.BFJtgY
Size: 5KB - Virtual size: 19KB

.EPcCp
Size: 91KB - Virtual size: 91KB

.hQm
Size: 11KB - Virtual size: 116KB

.DML
Size: 1024B - Virtual size: 415KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB