42a1492b58e85a4b4b49b2d33608413c

Sharing

Copy URL

Twitter E-mail

General

Target

42a1492b58e85a4b4b49b2d33608413c
Size

260KB
MD5

42a1492b58e85a4b4b49b2d33608413c
SHA1

a26ac907b6ae83de36aaffc49959174f4c1c8b92
SHA256

618f070f15ea83b900caf9ff65a88cf6a4eeda03a8e32d47848cf9d90b9df6a7
SHA512

c9ea934db2af3df6f91de73892763185f891be2e7457866466f4e77f48ec2b17499b51f446c561f415d482362569ac55ba32b64001d7b960ba7577f353138380
SSDEEP

6144:AAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:AoB7BsHQz8JmG0D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a1492b58e85a4b4b49b2d33608413c

Files

42a1492b58e85a4b4b49b2d33608413c
.exe windows:4 windows x86 arch:x86

f982bf68faea31fb085b9351d99b9619

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord823
ord825

msvcrt

free
_beginthread

atl

ord21
ord18
ord22
ord15
ord16
ord44
ord43
ord32
ord58
ord23

kernel32

GetVersionExW
SetEvent
WaitForSingleObject
IsBadReadPtr
GetNumberFormatW
GetLocaleInfoW
GetCurrentProcess
InitializeCriticalSection
lstrlenW
GetModuleFileNameW
lstrcpyW
GetShortPathNameW
GetModuleHandleW
lstrcmpiW
GetWindowsDirectoryW
GlobalAlloc
GetModuleHandleA
GetLastError
LoadLibraryW
LoadLibraryA
ExpandEnvironmentStringsW
lstrcmpW
GetCurrentThread
lstrcatW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
MultiByteToWideChar
lstrlenA
LocalFree
GetProcessHeap
CreateEventW
GetProcAddress

user32

SetWindowTextW
SetFocus
SendMessageW
SetDlgItemTextW
DialogBoxParamW
SendDlgItemMessageW
wsprintfW
MessageBeep
ShowWindow
GetDlgItemInt
EndDialog
SetDlgItemInt
LoadImageW
SetCursor
LoadCursorW
ShowCursor
IsWindow
PeekMessageW
SetWindowLongW
PostMessageW
EnableWindow
GetDlgItemTextW
LoadBitmapW
IsDlgButtonChecked
LoadIconW
MessageBoxW
WinHelpW
GetSystemMetrics

advapi32

LookupPrivilegeValueW
OpenThreadToken
AdjustTokenPrivileges
ImpersonateSelf
RegOpenKeyW
RegQueryValueExW
GetUserNameW
LookupAccountNameW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
GetTokenInformation
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW

oleaut32

SafeArrayGetLBound
SafeArrayGetElement
SysAllocStringByteLen
VariantChangeType
SafeArrayGetUBound
SysStringByteLen
VariantClear
VariantInit
SysStringLen
SysAllocString
SysFreeString

ole32

CoCreateInstance
CoInitialize
StringFromCLSID

gdi32

GetTextExtentPointW
DeleteObject

shell32

ShellExecuteW

shlwapi

StrFormatByteSizeW

samlib

SamCloseHandle
SamFreeMemory
SamGetGroupsForUser
SamSetMemberAttributesOfGroup
SamiSetDSRMPasswordOWF
SamCreateGroupInDomain
SamGetAliasMembership
SamEnumerateUsersInDomain
SamGetDisplayEnumerationIndex

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Fq
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SBYeOU
Size: 110KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MDnc
Size: 2KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oFOQE
Size: 3KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.QHZGU
Size: 3KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kUM
Size: 107KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f982bf68faea31fb085b9351d99b9619

Headers

File Characteristics

Imports

mfc42u

msvcrt

atl

kernel32

user32

advapi32

oleaut32

ole32

gdi32

shell32

shlwapi

samlib

Sections

.text Size: 14KB - Virtual size: 16KB

.Fq Size: 2KB - Virtual size: 45KB

.SBYeOU Size: 110KB - Virtual size: 192KB

.MDnc Size: 2KB - Virtual size: 279KB

.oFOQE Size: 3KB - Virtual size: 363KB

.rdata Size: 3KB - Virtual size: 5KB

.QHZGU Size: 3KB - Virtual size: 211KB

.data Size: 5KB - Virtual size: 268KB

.kUM Size: 107KB - Virtual size: 189KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 14KB - Virtual size: 16KB

.Fq
Size: 2KB - Virtual size: 45KB

.SBYeOU
Size: 110KB - Virtual size: 192KB

.MDnc
Size: 2KB - Virtual size: 279KB

.oFOQE
Size: 3KB - Virtual size: 363KB

.rdata
Size: 3KB - Virtual size: 5KB

.QHZGU
Size: 3KB - Virtual size: 211KB

.data
Size: 5KB - Virtual size: 268KB

.kUM
Size: 107KB - Virtual size: 189KB

.rsrc
Size: 7KB - Virtual size: 7KB