3898a3a0ad0dacf92e9a77416a7e53d3

Sharing

Copy URL Twitter E-mail

General

Target

3898a3a0ad0dacf92e9a77416a7e53d3
Size

68KB
MD5

3898a3a0ad0dacf92e9a77416a7e53d3
SHA1

0b32a4bc480432238868bb15c65514473f1a1e7d
SHA256

cb602b94b85857ce484fd04f98818b6e1e782db0ba98c7bcb2f964f9dfccc5e4
SHA512

400446cbe836018190a8e664dd5f71a2cfa3af10a27eb0b6fe5d099234c8fe6727c2b4b73574607214fbe99865cfc9dfc50f39e13e5bd94cc413aacd06f3626b
SSDEEP

1536:8o6NaouI4NpDH9cm1K+n7JNnelSKD2Y4FXEtp:ccouIipDHmmTn7JNelSOh4FUtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3898a3a0ad0dacf92e9a77416a7e53d3

Files

3898a3a0ad0dacf92e9a77416a7e53d3
.exe .vbs windows:1 windows x86 arch:x86 polyglot

70009a0cc674748aa7e0416a00fe4c0d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
MessageBoxA
DestroyWindow
DefWindowProcA
EndPaint
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
wsprintfA
PostQuitMessage
BeginPaint

kernel32

CreateFileA
GetCommModemStatus
PurgeComm
SetEnvironmentVariableA
GetTimeZoneInformation
VirtualAlloc
VirtualFree
CloseHandle
GetLastError
CreateSemaphoreA
GetCommandLineA
SetPriorityClass
GetCurrentProcess
OpenEventA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
CreateMutexA
MapViewOfFile
CreateFileMappingA
OpenMutexA
UnmapViewOfFile
Sleep
WaitForSingleObject
ReleaseSemaphore
WriteFile
GetTickCount
FlushFileBuffers
GetComputerNameA
lstrlenA
GetVersionExA
GetSystemDefaultLangID
GetSystemTime
SetThreadPriority
CreateThread
OpenProcess
GetCurrentProcessId
SetEvent
CreateEventA
lstrcmpiA
GetPriorityClass
ResetEvent
GetOverlappedResult
SetCommMask
SetCommState
GetCommState
SetCommTimeouts
SetupComm
GetModuleFileNameA
lstrcmpA
lstrcpynA
TlsGetValue
WaitCommEvent
ReadFile
SetLastError
IsBadReadPtr
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
GetCPInfo
GetProcAddress
WideCharToMultiByte
GetEnvironmentStrings
MultiByteToWideChar
ExitProcess
UnhandledExceptionFilter
GetVersion
GetACP
GetStartupInfoA
GetModuleHandleA
GetOEMCP
RtlUnwind
GetLocalTime

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

mosmisc

FGetRegistrySz

tapi32

lineGetDevConfig
lineDeallocateCall
lineInitialize
lineOpen
lineGetDevCaps
lineMakeCall
lineSetDevConfig
lineClose
lineShutdown
lineGetID
lineGetCallInfo
lineDrop
lineNegotiateAPIVersion

Sections

��t
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70009a0cc674748aa7e0416a00fe4c0d

Headers

File Characteristics

Imports

user32

kernel32

advapi32

mosmisc

tapi32

Sections

����t Size: 50KB - Virtual size: 50KB

.bss Size: - Virtual size: 5KB

.data Size: 7KB - Virtual size: 7KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 3KB

��t
Size: 50KB - Virtual size: 50KB

.bss
Size: - Virtual size: 5KB

.data
Size: 7KB - Virtual size: 7KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 3KB