32263bc5bfe863581a03fdf6eef0224c

Sharing

Copy URL Twitter E-mail

General

Target

32263bc5bfe863581a03fdf6eef0224c
Size

100KB
MD5

32263bc5bfe863581a03fdf6eef0224c
SHA1

e8f14fe2626fbde1c610c930299f59cc40c68d05
SHA256

41f8975580c9e140c2f323ca5ec349372e58a5c10f6fb9fc19d17baece1d3f7f
SHA512

e28f5f9fa887973c9dcd2fb10bcebba89264df15071e8f024b52be28bef0cb9ca68516cb256553dc0cad158c0920ac3e03caf13e148803a60fd583217c71c4c7
SSDEEP

1536:79gW88s6jFK5FDlefND8Wcaot/m8gpkjl6zDDdFo3CWzpiB78KERY2wZ3/xFe14K:7aW88sn5FDI2t/m8Z40VFnKERE3/by

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/UGA6P_0001_N119M1510NetInstaller.exe

Files

32263bc5bfe863581a03fdf6eef0224c
.cab
UGA6P_0001_N119M1510NetInstaller.exe
.exe windows:4 windows x86 arch:x86

573988dcee3cb463d0b7d41bf2c16070

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

shell32

ShellExecuteA
SHFileOperationA
Shell_NotifyIconA
SHGetSpecialFolderPathA

comctl32

InitCommonControlsEx

ws2_32

WSAStartup
WSACleanup
htons
inet_addr
gethostbyname
socket
closesocket
connect

shlwapi

StrChrA
StrFormatByteSizeA
StrStrA
PathAppendA
PathCombineA
PathRemoveFileSpecA
StrCmpW
StrToIntA
wnsprintfA
PathStripPathA

iphlpapi

GetAdaptersInfo

kernel32

IsBadCodePtr
IsBadReadPtr
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetLastError
CloseHandle
CreateFileA
WriteFile
WideCharToMultiByte
lstrlenA
Sleep
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetSystemTime
GetCurrentProcess
GetCurrentThreadId
GetProcAddress
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
GetFileAttributesA
GetModuleHandleA
CreateMutexA
ExitProcess
FreeResource
CreateProcessA
CopyFileA
SetUnhandledExceptionFilter
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
MapViewOfFileEx
CreateFileMappingA
GetFileSize
UnmapViewOfFile
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetStdHandle
WritePrivateProfileStringA
GetTempPathA
GetExitCodeProcess
WaitForSingleObject
GetModuleFileNameA
CreateDirectoryA
lstrcpynA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetVolumeInformationA
RemoveDirectoryA
GetSystemTimeAsFileTime
SetFilePointer
FlushFileBuffers
TerminateProcess
TerminateThread
CreateThread
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CompareStringA
CompareStringW
lstrcmpA
GetTickCount
LocalAlloc
LocalFree
ReleaseMutex
CreateEventA
ResetEvent
SetEvent
TlsAlloc
TlsFree
TlsGetValue
SetErrorMode
WaitForSingleObjectEx
LCMapStringW
LCMapStringA
SetLastError
GetCPInfo
GetOEMCP
IsBadWritePtr
VirtualFree
HeapCreate
GetCommandLineA
GetStartupInfoA
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
LeaveCriticalSection
EnterCriticalSection
SetEnvironmentVariableA
CompareFileTime
TlsSetValue

user32

UpdateWindow
CreateDialogParamA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetSysColor
GetWindowTextLengthA
DialogBoxParamA
SetForegroundWindow
EndDialog
SendMessageA
KillTimer
SetDlgItemTextA
GetDlgItem
GetSystemMenu
DeleteMenu
ShowWindow
LoadStringA
RegisterWindowMessageA
PostMessageA
MessageBoxA
LoadIconA
LoadCursorA
GetSysColorBrush
RegisterClassExA
SetTimer
DestroyWindow
GetDlgItemTextA
IsWindowVisible
IsWindow
DefWindowProcA
PostQuitMessage
SetWindowPos
LoadImageA
SetWindowTextA

advapi32

RegCloseKey
RegFlushKey
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
GetUserNameA
RegSetValueExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize
CoCreateInstance
OleRun

oleaut32

SysAllocString
VariantClear

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UGA6P_0001_N119M1510NetInstaller.inf

Sharing

General

Malware Config

Signatures

Files

573988dcee3cb463d0b7d41bf2c16070

Headers

File Characteristics

Imports

shfolder

shell32

comctl32

ws2_32

shlwapi

iphlpapi

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 39KB - Virtual size: 38KB

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 39KB - Virtual size: 38KB