4243b58eb74f6ec7f7775b2f7b0e27c4

Sharing

Copy URL Twitter E-mail

General

Target

4243b58eb74f6ec7f7775b2f7b0e27c4
Size

267KB
MD5

4243b58eb74f6ec7f7775b2f7b0e27c4
SHA1

c93db0c731aa73ced865098d816c93d6818cdd6d
SHA256

e0e89821fa9940b475fbb0c5d00ac4bdd19f5661155f2964c104923b24b3b009
SHA512

9a43388382b3ef4ac6c5c5f94c49f7569c2392c3eab7d7a2924fa0720cb0f91dab998773ea055871d73e529960d75b9aab950d71670a278034273c353f0ef47b
SSDEEP

6144:TRU6lcVPxo+C5zlxW4e0vpmlbVmioE7uMb:q0cVpo+Ezi4e0xGMHECM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4243b58eb74f6ec7f7775b2f7b0e27c4

Files

4243b58eb74f6ec7f7775b2f7b0e27c4
.exe windows:5 windows x86 arch:x86

f888960ca168ea8ecc42c57fd45d339f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

SetCursor
LoadBitmapW
DispatchMessageW
wsprintfW
GetMessageW
LoadStringW
SetTimer
BeginPaint
SendMessageW
DialogBoxParamW
PostMessageW
FlashWindow
GetDlgItem
GetSystemMetrics
GetDC
LoadCursorW
GetSysColor
GetDlgItemInt
DrawMenuBar

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW

gdi32

DeleteDC
CreateICW
CreateCompatibleDC
CombineRgn
SetRectRgn
GetStockObject
GetTextExtentPoint32W
StretchBlt

kernel32

PeekNamedPipe
InterlockedFlushSList
CreateThread
GetTickCount
DosDateTimeToFileTime
SetThreadExecutionState
CreateNamedPipeA
GetCurrentProcessId
TransactNamedPipe
SetLocaleInfoA
GetEnvironmentStringsA
HeapDestroy
TryEnterCriticalSection
GetSystemTimeAsFileTime
MapViewOfFile
FileTimeToLocalFileTime
HeapAlloc
SetFilePointer
HeapValidate
EnumSystemLocalesA
CreateFileA
GetUserDefaultLangID
EnumLanguageGroupLocalesA
SetThreadUILanguage
InterlockedExchangeAdd
LeaveCriticalSection
lstrcpyA
ExitThread
OpenThread
CreateFileMappingA
InterlockedDecrement
ReadFile
RegisterWaitForSingleObjectEx
GetFileTime
GetUserDefaultLCID
GetNamedPipeHandleStateA
ConnectNamedPipe
PostQueuedCompletionStatus
lstrcmpiA
EncodePointer
DeleteCriticalSection
WaitForSingleObject
EnumSystemLanguageGroupsA
UnmapViewOfFile
DecodePointer
GetStringTypeA
CallNamedPipeA
FileTimeToSystemTime
SleepEx
GetThreadContext
GetSystemDefaultLangID
ResumeThread
SetFilePointerEx
GetSystemDefaultLCID
AssignProcessToJobObject
GetUserDefaultUILanguage
GetThreadSelectorEntry
EnterCriticalSection
InitializeCriticalSection
GetFirmwareEnvironmentVariableA
SetThreadPriority
DeleteFileA
FreeEnvironmentStringsA
FlushViewOfFile
GetQueuedCompletionStatus
GetThreadPriority
HeapCompact
lstrcatA
lstrcmpA
SetPriorityClass
HeapCreate
WriteFileEx
VirtualAllocEx
WaitForMultipleObjects
CloseHandle
WriteFile
ExpandEnvironmentStringsA
WaitNamedPipeA
RtlMoveMemory
IsValidLocale
CopyFileExA
CreateIoCompletionPort
WriteFileGather
SetFirmwareEnvironmentVariableA
GetSystemDefaultUILanguage
HeapSetInformation
ConvertDefaultLocale
GetFileAttributesExA
InterlockedCompareExchange
InterlockedIncrement
FileTimeToDosDateTime
OpenFileMappingA
HeapFree

msvcrt

rand
_except_handler3
__p__commode
_initterm
exit
_cexit
__setusermatherr
__getmainargs

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f888960ca168ea8ecc42c57fd45d339f

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

gdi32

kernel32

msvcrt

Sections

.text Size: 175KB - Virtual size: 175KB

.data Size: 73KB - Virtual size: 73KB

.rsrc Size: 17KB - Virtual size: 560KB

.text
Size: 175KB - Virtual size: 175KB

.data
Size: 73KB - Virtual size: 73KB

.rsrc
Size: 17KB - Virtual size: 560KB