0708882ac63a52c7ef592e80cc21aff4

Sharing

Copy URL Twitter E-mail

General

Target

0708882ac63a52c7ef592e80cc21aff4
Size

216KB
MD5

0708882ac63a52c7ef592e80cc21aff4
SHA1

c5750ddc03e79ed35f6f382055948235f22c7114
SHA256

07c0f3364d471b28fb7e10c367a1a8b42dc73d6cf2336b016f14bffd32437586
SHA512

361ce40c1dd39b2e343cf6c73f4ae58e469da18d2f72a58194d1f018811920b94c346248a07f254f43daabd5d19914dc7614c485cb572a2249cae22d994b0944
SSDEEP

3072:WAumqO27TMn5fQH4/AhjSVdvQHgDJ3bMGeVP9QCkXoHzKJoVKH+6UB6R2OD0AxSg:WA/2PMn5fozKOI+Go9tkwjyR2ORSsQe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0708882ac63a52c7ef592e80cc21aff4

Files

0708882ac63a52c7ef592e80cc21aff4
.exe windows:4 windows x86 arch:x86

5846e1d8bac42da19bea4cc68c50b454

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
SetFileTime
GetTickCount
SetErrorMode
Sleep
GetLocalTime
WriteFile
GetWindowsDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
SetLastError
SetFilePointer
SetEndOfFile
GetModuleFileNameA
GetSystemDefaultLangID
CreateEventA
EnterCriticalSection
ExitProcess
VirtualAlloc
VirtualFree
GetSystemInfo
DeleteCriticalSection
OutputDebugStringA
InitializeCriticalSection
HeapFree
GetProcessHeap
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
TerminateProcess
CopyFileA
LeaveCriticalSection
SetUnhandledExceptionFilter
FindClose
FindFirstFileA
FormatMessageA
HeapAlloc
GetTempFileNameA
UnmapViewOfFile
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
MapViewOfFile
CreateFileMappingA
SetEvent
SetThreadPriority
CreateThread
WaitForSingleObject
GetVolumeInformationA
GetComputerNameA
IsBadReadPtr
GetCurrentThread
IsBadWritePtr
VirtualQuery
lstrcpynA
FlushFileBuffers
VirtualUnlock
VirtualLock
GetCurrentDirectoryA
MoveFileA
GetModuleHandleA
CreateDirectoryA
GetDiskFreeSpaceA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
GetFileSize
ReadFile
CloseHandle
DeleteFileA
GetFileAttributesA
RaiseException
GetExitCodeProcess
GetCurrentProcess
GetLastError
GetVersion
SetStdHandle
LCMapStringW
IsBadCodePtr
GetStringTypeW
GetStringTypeA
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
TlsGetValue
TlsAlloc
TlsSetValue
GetOEMCP
GetACP
GetCPInfo
HeapSize
HeapReAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetFullPathNameA

user32

DialogBoxParamA
EndDialog
SetDlgItemTextA
ShowWindow
GetDlgItem
GetDlgItemTextA
SetTimer
EnableWindow
IsWindowVisible
SetWindowTextA
CreateWindowExA
GetSystemMetrics
RegisterClassExA
LoadCursorA
LoadIconA
SetWindowPos
DefWindowProcA
DestroyWindow
IsWindow
MessageBoxA
wsprintfA
FindWindowA
GetLastActivePopup
GetTopWindow
SetForegroundWindow
LoadStringA
SetClassLongA
CheckDlgButton
MoveWindow
SetFocus
IsDlgButtonChecked
SendDlgItemMessageA
GetWindowRect
GetDC
ReleaseDC
CreateDialogParamA
UpdateWindow
LoadImageA
PostQuitMessage

gdi32

GetStockObject
GetDeviceCaps

comctl32

ord17

advapi32

RegFlushKey
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
GetUserNameA
RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5846e1d8bac42da19bea4cc68c50b454

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

advapi32

shell32

version

Sections

.text Size: 128KB - Virtual size: 125KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 20KB - Virtual size: 45KB

.rsrc Size: 52KB - Virtual size: 61KB

.text
Size: 128KB - Virtual size: 125KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 20KB - Virtual size: 45KB

.rsrc
Size: 52KB - Virtual size: 61KB