001f8563719e5d5adca24f004c298a82

Sharing

Copy URL Twitter E-mail

General

Target

001f8563719e5d5adca24f004c298a82
Size

212KB
MD5

001f8563719e5d5adca24f004c298a82
SHA1

7ba34d8573a05817589704196eed31ac982ea26c
SHA256

94e1a1b0b1142312595e9b3a165b5a9b4de0371f378129967e59ac3ec578db04
SHA512

431854341bb958ce03be21e04792a875b08cb39a8b60aac4e6b6981235340c2e26aa6f2ad0b14641c811da3dfd62478617313826a53b0ad4e912e4031c9296b1
SSDEEP

3072:mmyf1GpRk8ezA+hvMdg1lGBUxeFpPmVmLD8p0E1jDo/XZFKey5:mMRk8t+hvBjVmnA1iF7C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001f8563719e5d5adca24f004c298a82

Files

001f8563719e5d5adca24f004c298a82
.exe windows:4 windows x86 arch:x86

c64c03a0c8c75c3c6c8bdd4545c4fbde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
HeapReAlloc
lstrlenA
GetProcessHeap
HeapAlloc
HeapFree
CreateProcessA
GlobalFree
FindFirstFileA
FindClose
GlobalAlloc
GetUserDefaultLCID
CloseHandle
ResetEvent
CreateEventA
SetLastError
GetProcAddress
FreeLibrary
WaitForSingleObject
Sleep
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetLastError
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
LoadLibraryA
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
lstrcpyA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
LocalFree
FormatMessageA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetErrorMode
lstrcatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetVersion
LocalAlloc
TlsAlloc
GlobalUnlock
GlobalHandle
TlsFree
GlobalLock
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
SuspendThread
lstrcmpA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
LoadResource
FindResourceA
GetProcessVersion
MulDiv
GlobalFlags
GetCurrentThread
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
RtlUnwind
RaiseException
GetDriveTypeA
CreateThread
ExitThread
GetStartupInfoA
GetCommandLineA
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapSize
TerminateProcess
FatalAppExitA
SetUnhandledExceptionFilter
SetCurrentDirectoryA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetModuleFileNameA
FlushFileBuffers
GetSystemInfo

user32

IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
PeekMessageA
ValidateRect
CallNextHookEx
GetKeyState
GetNextDlgTabItem
GetFocus
EnableMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowPlacement
IsIconic
IntersectRect
OffsetRect
SetWindowLongA
GetWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
GetWindowLongA
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
SetActiveWindow
MapWindowPoints
UpdateWindow
LoadIconA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
GetDesktopWindow
GetWindowDC
TabbedTextOutA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
OemToCharA
CharToOemA
MessageBoxA
EnableWindow
PostMessageA
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetSubMenu
UnhookWindowsHookEx
CharUpperA
SetScrollRange
CreateWindowExA
SystemParametersInfoA
MoveWindow
FindWindowExA
RegisterWindowMessageA
GetMessageA
DispatchMessageA
TranslateMessage
DestroyWindow
DefWindowProcA
ClientToScreen
KillTimer
GetSystemMetrics
BeginPaint
GetSysColor
GetClientRect
DrawTextA
EndPaint
RegisterClassExA
FindWindowA
LoadStringA
LoadImageA
PostQuitMessage
GetActiveWindow
IsWindowVisible
GetWindowRect
GetParent
ScreenToClient
SetWindowPos
CreateDialogParamA
SendMessageA
ShowWindow
SetClassLongA
IsWindow
SendDlgItemMessageA
SetDlgItemTextA
WaitForInputIdle
EnumThreadWindows
GetClassNameA
SetTimer
CheckMenuItem
LoadMenuA
GetCursorPos
wsprintfA

gdi32

DeleteObject
GetDeviceCaps
DeleteDC
StartDocA
GetObjectA
GetClipBox
CreateBitmap
GetDCOrgEx
SaveDC
Escape
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
ExtTextOutA
SetTextColor
SetBkColor
SelectObject
GetStockObject
SetBkMode
SelectPalette
RestoreDC

shell32

Shell_NotifyIconA
SHGetFileInfoA
DragAcceptFiles
ShellExecuteA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
RegNotifyChangeKeyValue
RegCreateKeyA
RegQueryValueA
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegCloseKey

winspool.drv

OpenPrinterA
DocumentPropertiesA
GetJobA
ClosePrinter

comctl32

ord17

comdlg32

GetFileTitleA

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KAO
Size: 575B - Virtual size: 575B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c64c03a0c8c75c3c6c8bdd4545c4fbde

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

winspool.drv

comctl32

comdlg32

Sections

.text Size: 140KB - Virtual size: 136KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 20KB - Virtual size: 32KB

.rsrc Size: 20KB - Virtual size: 17KB

.KAO Size: 575B - Virtual size: 575B

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 20KB - Virtual size: 32KB

.rsrc
Size: 20KB - Virtual size: 17KB

.KAO
Size: 575B - Virtual size: 575B