4682172be5cbdd5535a4b347d6e00ab6

Sharing

Copy URL Twitter E-mail

General

Target

4682172be5cbdd5535a4b347d6e00ab6
Size

2.1MB
MD5

4682172be5cbdd5535a4b347d6e00ab6
SHA1

d7f76b122d9449dcbf7009f7fc24d27aad131869
SHA256

12a142381f9bc96efba7d92f0f266b98a5c1efb3c63b4c9a62cb2df1c0e475e5
SHA512

d58e237163fc4471073a9dc39169deffd9924562c103876c62b11b0951daa0e2fb206de3e4b5c7f249b8daa4ea5beb4202d502ed5d2fa2436b37a368c0c007af
SSDEEP

24576:pbOjX9jKyR+7BDWBTrY6gj+vsN1KbPbszzCVsoW73cjCvqNkZLvjCFfTtKuoM68W:pbwKd7B6lSgsN1KDUfB3SfajCFYbAR1w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4682172be5cbdd5535a4b347d6e00ab6

Files

4682172be5cbdd5535a4b347d6e00ab6
.exe windows:4 windows x86 arch:x86

3aacc1a610ab18d5fc893d604b31b60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
CryptAcquireContextA
InitializeAcl
IsValidSid
RegCloseKey
RegCreateKeyExA
OpenSCManagerW
RegOpenKeyExW
OpenThreadToken

msvcrt

_except_handler3
_onexit
__dllonexit
__set_app_type
_controlfp
_acmdln
_XcptFilter
rewind
strncmp
_amsg_exit
_initterm
strstr
malloc
wcscpy
exit
_adjust_fdiv
ferror
__setusermatherr
_getcwd
_exit
__p__commode
_vsnprintf
fclose
realloc
__getmainargs
isdigit
__p__fmode
__p___initenv
fputs

kernel32

GetCurrentProcessId
GetTickCount
Sleep
GetProcAddress
GetCurrentThreadId
GetLastError
SetUnhandledExceptionFilter
VirtualFree
GetCurrentProcess
LoadLibraryA
VirtualAlloc
GetStartupInfoA
UnhandledExceptionFilter
GetModuleHandleA
FreeLibrary

ole32

OleInitialize
CoTaskMemFree
HWND_UserMarshal
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoGetClassObject
CLSIDFromString

shlwapi

PathMatchSpecW
PathIsUNCW
PathFindExtensionW
PathFileExistsW
PathFindFileNameW
PathStripToRootW
PathCompactPathW

gdi32

SetBkColor
GetClipRgn
ModifyWorldTransform
GetObjectType
GetObjectW
DeleteObject
OffsetRgn
SetViewportOrgEx
CreateBrushIndirect
GetTextExtentPoint32W
GetDeviceCaps
GetTextFaceA
SetTextColor
CreateDCW
GetDIBits
DeleteDC
SelectObject
GetStockObject
CreateFontIndirectW
TextOutW
GetTextExtentPointA
SetBrushOrgEx
GdiFlush
GetTextMetricsW
CreateBitmap

user32

GetDC
MoveWindow
GetSysColor
EnableWindow
DestroyMenu
LoadStringW
SetForegroundWindow
GetDlgItem
SendMessageW
ReleaseDC
SetWindowPos
TranslateMessage
MessageBoxW
GetWindow
SetWindowTextW
IsWindow
IsWindowEnabled
EndDialog
SetFocus
KillTimer
MessageBoxA
DestroyWindow
GetParent
GetClientRect
CreatePopupMenu
ShowWindow
PostQuitMessage
GetWindowRect
SetCursor

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3aacc1a610ab18d5fc893d604b31b60b

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

ole32

shlwapi

gdi32

user32

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 12KB - Virtual size: 8KB