3d14e2e2f67cf7ca916b212359049774

Sharing

Copy URL Twitter E-mail

General

Target

3d14e2e2f67cf7ca916b212359049774
Size

270KB
MD5

3d14e2e2f67cf7ca916b212359049774
SHA1

5e40a3f25d75d3f4b1c1881147013aa9f067bfc4
SHA256

e17ee48f0298b47754c5c890db9a10e30a9babc9e56d478f46e44afc099e0fdd
SHA512

a87daf81968b6cebad5664f958afbdaf8598a0e461cd35260786c20f3a7cebe09b24d125bce0408a8df234979bb6ed033f301f08b461f7507b559711a55b3a40
SSDEEP

6144:Bwy0LEcBRM4RFcN0WKMrH5RoGyJgWQcvq4/:0EcTNRFcN0+z4GrlcCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d14e2e2f67cf7ca916b212359049774

Files

3d14e2e2f67cf7ca916b212359049774
.exe windows:4 windows x86 arch:x86

04ce5770677684a4808573edc2b5de6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
GetCPInfo
ExitThread
GetACP
GetOEMCP
TerminateProcess
CreateThread
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
MulDiv
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
SetEvent
WaitForSingleObject
CloseHandle
GlobalAlloc
GlobalDeleteAtom
HeapFree
GetStartupInfoA
RaiseException
GetCommandLineA
GetModuleHandleA
RtlUnwind
GlobalAddAtomA
SetErrorMode
GlobalGetAtomNameA
GetModuleFileNameA
GetFullPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
SetEndOfFile
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
WritePrivateProfileStringA
GetProcessVersion
GetVersionExA
TlsGetValue
LoadLibraryA
GetProcAddress
EnterCriticalSection
LocalReAlloc
TlsSetValue
lstrcmpA
lstrcmpiA
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
MultiByteToWideChar
GetCurrentThread
GlobalHandle
DeleteCriticalSection
lstrcpyA
InitializeCriticalSection
LocalAlloc
GlobalFlags
SizeofResource
GetLastError
LocalFree
lstrcpynA
LCMapStringW
SetLastError
FreeLibrary
LoadResource
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
VirtualAlloc
GetStringTypeA
SetUnhandledExceptionFilter
LCMapStringA
WideCharToMultiByte
GetCurrentThreadId
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetProfileStringA
lstrcatA
GetVersion
InterlockedIncrement
InterlockedDecrement
lstrlenA

user32

MessageBoxA
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
KillTimer
SetCursor
WaitMessage
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
FindWindowA
InvalidateRect
OffsetRect
LoadStringA
ReleaseCapture
WindowFromPoint
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IntersectRect
InflateRect
PostMessageA
UpdateWindow
SystemParametersInfoA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
PostQuitMessage
DeferWindowPos
BeginDeferWindowPos
CopyRect
wvsprintfA
ShowOwnedPopups
SetScrollInfo
ShowScrollBar
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
EndDeferWindowPos
IsWindowVisible
AdjustWindowRectEx
EqualRect
EnableWindow
ScrollWindow
ScreenToClient
SetScrollRange
SendDlgItemMessageA
HideCaret
ShowCaret
UnregisterClassA
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
ExcludeUpdateRgn

gdi32

SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetTextColor
ScaleWindowExtEx
SetWindowExtEx
GetObjectA
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
GetTextExtentPointA
ExtTextOutA
PatBlt
CreateDIBitmap
CreateCompatibleDC
GetClipBox
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

DragFinish
DragQueryFileA

comctl32

ImageList_Destroy
ord17

wsock32

ioctlsocket
bind
accept
htonl
htons
recv
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
gethostbyname
closesocket
send

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04ce5770677684a4808573edc2b5de6d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

Sections

.text Size: 126KB - Virtual size: 125KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 17KB - Virtual size: 34KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 92KB - Virtual size: 92KB

.text
Size: 126KB - Virtual size: 125KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 17KB - Virtual size: 34KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 92KB - Virtual size: 92KB