0fcdd56a0e65cf81f1f7259a77e29487

Sharing

Copy URL

Twitter E-mail

General

Target

0fcdd56a0e65cf81f1f7259a77e29487
Size

45KB
MD5

0fcdd56a0e65cf81f1f7259a77e29487
SHA1

95e4843615373f959d615b39f4d8755aacfcb07a
SHA256

bddbfb03fdf95b67e3c9ca582388cd27d311b8852e020e99773b756724913893
SHA512

36a42aee2eb77450702abe912b8e379161039db753c5469d08de811599390bf508fb450e7e8592f8401656be35b003bacef47ce08001b9fe61307ffd24b96598
SSDEEP

768:Fu1svLqoHDQw3JbQe2eXEM3uvgM3LuB9KLPEB0UjHR4FgFLO16E:YavZ3W0XEM3uYM3CB9KwB0QR4cLOR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fcdd56a0e65cf81f1f7259a77e29487

Files

0fcdd56a0e65cf81f1f7259a77e29487
.exe windows:4 windows x86 arch:x86

ec21728e3fa9aa1889bbb20d67d85c9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetModuleFileNameA
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrcatA
GetTempPathA
GetCommandLineA
GetSystemDirectoryA
lstrcmpA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
IsBadStringPtrA
GetShortPathNameA
CopyFileA
GetVersionExA
CreateProcessA
GetLastError
CopyFileW
MoveFileW
lstrcatW
lstrcpyW
GetProcAddress
LoadLibraryA
GetSystemDirectoryW
WaitForSingleObject
CreateMutexA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameW
CreateFileW
SetFilePointer
ReadFile
IsBadWritePtr
WriteFile
Sleep
GetVolumeInformationA
CloseHandle
CreateFileA
DeviceIoControl
GetEnvironmentVariableA

user32

wsprintfA
LoadIconA
SetWindowPos
MessageBoxA
SetTimer
DispatchMessageA
TranslateMessage
IsWindow
IsDialogMessageA
GetMessageA
ShowWindow
CreateDialogParamA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCloseKey

shell32

ShellExecuteExA
SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteA
SHChangeNotify

ole32

CoCreateInstance
CoInitialize

oleaut32

SysAllocString

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shlwapi

PathGetDriveNumberA

msvcrt

__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
_initterm
free
_except_handler3
strstr
atoi
strncat
__CxxFrameHandler
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
strncpy
sprintf
_strdup

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec21728e3fa9aa1889bbb20d67d85c9d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

msvcp60

shlwapi

msvcrt

wininet

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 25KB - Virtual size: 24KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 25KB - Virtual size: 24KB