5fcc4b67baab226b4be6dcdaf64824f9

Sharing

Copy URL

Twitter E-mail

General

Target

5fcc4b67baab226b4be6dcdaf64824f9
Size

212KB
MD5

5fcc4b67baab226b4be6dcdaf64824f9
SHA1

3b3a9eac208fed1f6abcb0ea93cb99b37d29e715
SHA256

21ac5a628b25aba217b44ae522707f44db5badf3ad69e3dd434debf3d44b7f12
SHA512

297da1685f61b63f811239e6ae18fdbad43e15889f159eb431c0c617ca668f253b4e3702536b162fec6f86141afbef6c8f25a260ffb8b17fc2a8b831675a523a
SSDEEP

6144:9LUQO61ipP4hEjmmMshNIzcg7Zd9aooC6G:NOMk4Ejmm5w4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fcc4b67baab226b4be6dcdaf64824f9

Files

5fcc4b67baab226b4be6dcdaf64824f9
.exe windows:1 windows x86 arch:x86

13ecfa07f06fcfdaea738423db8acca1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
SetFilePointer
ReadFile
ExpandEnvironmentStringsA
HeapCreate
GetStdHandle
GetCommandLineA
OpenEventA
HeapAlloc
GetCPInfo
lstrlenA
SizeofResource
ResetEvent
GetThreadContext
ExitProcess
lstrcpyA
GetConsoleMode
EnterCriticalSection
ExitThread
GetProcessAffinityMask
PulseEvent
GetCurrentProcessId
GetStartupInfoA
IsDebuggerPresent
InterlockedExchange
GetDateFormatA
GetConsoleCP
FreeEnvironmentStringsA
TlsFree
IsBadReadPtr
LCMapStringA
InitializeCriticalSection
LeaveCriticalSection
CreateProcessA
GetDriveTypeA
Module32Next
WaitForSingleObject
Sleep
TerminateThread
MulDiv
WaitForMultipleObjects
SearchPathA
LocalAlloc
RaiseException
SetPriorityClass
MapViewOfFile
GetEnvironmentVariableA
GlobalUnlock
HeapFree
GetVersionExA
VirtualFree
DeviceIoControl
GetEnvironmentStrings
IsBadStringPtrA
GetProcessWorkingSetSize
TlsSetValue
FindFirstFileA
GetStringTypeW
FormatMessageA
LockResource
GetTickCount
CreateFileMappingA
SetStdHandle
GetVersion
TerminateProcess
QueryPerformanceCounter
DeleteCriticalSection
GetCurrentProcess
FreeEnvironmentStringsW
GetModuleHandleW
DuplicateHandle
GetModuleFileNameA
LCMapStringW
GetNumberFormatA
InterlockedIncrement
lstrcmpA
lstrcmpiA
GlobalAddAtomA
FindClose
CreateEventA
CreateToolhelp32Snapshot
SetErrorMode
SetUnhandledExceptionFilter
VirtualQueryEx
QueryPerformanceFrequency
lstrlenW
FreeLibrary
LocalFree
ReadProcessMemory
GlobalLock
CloseHandle
FlushFileBuffers
GetModuleHandleA
GetStringTypeA
GetFileAttributesA
WriteConsoleA
GetProcessHeap
SetProcessWorkingSetSize
FindResourceA
GetTimeFormatA
GetOEMCP
GetLastError
FileTimeToLocalFileTime

user32

GetWindow
DestroyIcon
SendMessageTimeoutA
GetKeyState
UnionRect
GetParent
ExitWindowsEx
TrackPopupMenuEx
GetClientRect
CreateMenu
RegisterClassExA
SetClipboardData
EnableWindow
GetDlgItemTextA
GetClassNameA
CallWindowProcA
DialogBoxIndirectParamA
PostQuitMessage
GetMenuItemCount
DefDlgProcA
DeferWindowPos
SetTimer
GetDlgCtrlID
InflateRect
LoadIconA
AppendMenuA
GetSystemMetrics
UpdateWindow
EnumChildWindows
GetWindowDC
CheckDlgButton
SetClassLongA
MsgWaitForMultipleObjects
KillTimer
CreatePopupMenu
GetDC
DrawFrameControl
GetMenuItemID
DestroyWindow
IsDialogMessageA
IsDlgButtonChecked
GetWindowPlacement
ChildWindowFromPoint
OffsetRect
GetCapture
ModifyMenuA
LoadStringA
SetCursor
BeginDeferWindowPos
GetFocus
GetWindowLongA
LoadCursorA
FrameRect
ClientToScreen
DefFrameProcA
LoadAcceleratorsA
IsIconic
DeleteMenu
RedrawWindow
GetSubMenu
SetCapture
wsprintfA
GetDesktopWindow
CheckMenuItem
PeekMessageA
EndDeferWindowPos
InvalidateRect
EndDialog
IsZoomed
RegisterWindowMessageA
DrawEdge
GetMessageA
CreateWindowExA
CheckMenuRadioItem
EmptyClipboard
EndPaint
SetWindowPlacement
EnableMenuItem
GetSysColorBrush
SetPropA
FindWindowA
PostMessageA
MessageBoxA
RemoveMenu
IsWindowVisible
SetUserObjectSecurity
SetFocus
DrawTextA
GetDoubleClickTime
ShowWindowAsync
GetUpdateRgn
ReleaseCapture
InsertMenuA
SetWindowTextA
CheckRadioButton
EnumWindows
CreateIconIndirect
TranslateMessage
TrackPopupMenu
DialogBoxParamA
GetScrollInfo
SetMenuItemInfoA
IntersectRect
SetDlgItemTextA
PtInRect

msvcrt

__p__commode
__setusermatherr
__p__fmode
_except_handler3
_adjust_fdiv
_controlfp
_acmdln
_exit
__set_app_type
__getmainargs
_initterm
exit
memcpy
_XcptFilter

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13ecfa07f06fcfdaea738423db8acca1

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 186KB - Virtual size: 186KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 164B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 186KB - Virtual size: 186KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 164B