634c2313691f223c140918aa5800d51c

Sharing

Copy URL Twitter E-mail

General

Target

634c2313691f223c140918aa5800d51c
Size

135KB
MD5

634c2313691f223c140918aa5800d51c
SHA1

710f28b1a28faab3397e9d6e51a6895e060010cc
SHA256

e497577087b38a1d72230ca9bd2d1cd55780b8d66d264557d670c07f8ba403a7
SHA512

1542f8a1e7a3e30d1eef3fd3f0d8524c881c5f7d26eadcd07e9b3c784451f22069292158026e2f171113989678fb0c8e0e7d7c1108329b581b81338b397b8654
SSDEEP

1536:aT+rPUhBbQoYdZI2xUyRqQ+6333+TiCP3rX59D43UgJneja:aT+LUhhQZJlqX1P3rX5+3UgJej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634c2313691f223c140918aa5800d51c

Files

634c2313691f223c140918aa5800d51c
.exe windows:4 windows x86 arch:x86

cc2bb7809f3e7c1f443eb8c92d956c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetGetConnectionW

kernel32

CreateProcessW
AddAtomW
ExitThread
DeleteAtom
GetAtomNameW
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
LockResource
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LocalAlloc
lstrlenW
GetLastError
GetACP
MultiByteToWideChar
FindResourceW
LoadResource
WaitForMultipleObjects
GetExitCodeThread
GetLocalTime
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocaleInfoW
GetTimeFormatW
IsBadReadPtr
lstrcatW
GetSystemTime
GetComputerNameW
lstrcpyW
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpW
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
CreateThread
Sleep
SetEvent
GetModuleFileNameW
GetCommandLineW
FreeEnvironmentStringsA
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
GetVersion
GetCommandLineA
GetModuleFileNameA
FreeEnvironmentStringsW
ExitProcess
GetStartupInfoA
GetModuleHandleA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapCreate
GetCPInfo
VirtualFree
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeW
RtlUnwind
WriteFile
LCMapStringA
LCMapStringW
VirtualAlloc
LoadLibraryA
GetStringTypeA

user32

InvalidateRect
IsWindowVisible
DestroyWindow
EnumWindows
PostMessageW
GetClassNameW
LoadMenuW
CreateWindowExW
SetWindowLongW
GetSysColor
UpdateWindow
ScreenToClient
LoadCursorW
GetSysColorBrush
RegisterClassExW
FindWindowW
DrawIconEx
KillTimer
FillRect
ShowWindow
SetForegroundWindow
SetTimer
LoadAcceleratorsW
SetWindowTextW
CharPrevW
DefWindowProcW
CharNextW
DestroyMenu
CreateDialogParamW
PeekMessageW
SetActiveWindow
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetDlgItem
GetDlgCtrlID
ChildWindowFromPoint
CheckRadioButton
SendMessageW
IsDlgButtonChecked
EnableWindow
CheckDlgButton
WinHelpW
MessageBoxW
EndDialog
SetDlgItemTextW
GetMenu
LoadStringW
DrawTextW
wsprintfW
DialogBoxParamW
IsIconic
GetWindowRect
PostQuitMessage
SetWindowPos
GetClientRect
SetFocus
BeginPaint
GetWindowLongW
EndPaint
GetSystemMetrics
AppendMenuW
GetSystemMenu
EnableMenuItem

gdi32

LineTo
CreateCompatibleDC
SelectObject
CreatePen
CreatePalette
DeleteObject
DeleteDC
CreateDIBitmap
BitBlt
SetMapMode
GetMapMode
RealizePalette
SelectPalette
MoveToEx
CreateCompatibleBitmap
PatBlt
CreateSolidBrush
GetTextMetricsW
SetTextColor
SetBkMode
CreateFontIndirectW
SelectClipRgn
CreateRectRgn
SetBkColor
GetStockObject

winspool.drv

GetPrinterDriverDirectoryW
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
FreePrinterNotifyInfo
FindClosePrinterChangeNotification
GetJobW
SetJobW
EnumJobsW
GetPrinterW
OpenPrinterW
GetPrinterDriverW
ClosePrinter
SetPrinterDataW

advapi32

RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
InitializeSecurityDescriptor
RegQueryInfoKeyW
GetUserNameW
SetSecurityDescriptorDacl

imm32

ImmAssociateContext

winmm

PlaySoundW
waveOutGetNumDevs

comctl32

ord17
CreateStatusWindowW

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 839B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cc2bb7809f3e7c1f443eb8c92d956c5c

Headers

File Characteristics

Imports

mpr

kernel32

user32

gdi32

winspool.drv

advapi32

imm32

winmm

comctl32

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 1024B - Virtual size: 839B

.data Size: 37KB - Virtual size: 44KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 32KB - Virtual size: 52KB

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 1024B - Virtual size: 839B

.data
Size: 37KB - Virtual size: 44KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 32KB - Virtual size: 52KB