638d51ae143d01e9e3e0cb997d1d8472

Sharing

Copy URL Twitter E-mail

General

Target

638d51ae143d01e9e3e0cb997d1d8472
Size

156KB
MD5

638d51ae143d01e9e3e0cb997d1d8472
SHA1

de7df89dd573197663ced58180d1e3119f77fe01
SHA256

d0000d4d00afcb702d73fdbd6b7f16d8c00da4be2fc51cae9fe06ccdb3b682a0
SHA512

ec5c0725458405bc295acd6bbed28fd5d697916a293482502809c23e6448f459c83c4f70b237aea8813292c58b31da2362d04481b74221a6ed51906203435be5
SSDEEP

3072:hsWYTnQndEIgJtW1bLqm7W8nzlfVOsARXxFa:hWHVW9xWOl0ra

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
638d51ae143d01e9e3e0cb997d1d8472

Files

638d51ae143d01e9e3e0cb997d1d8472
.exe windows:4 windows x86 arch:x86

2a59752aed6136c123ee2bd468c8a852

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

GetModuleHandleA
CreateProcessA
GetWindowsDirectoryA
GetFileSize
CreateFileA
ReadFile
HeapFree
GetProcessHeap
WriteFile
GetLastError
HeapAlloc
FileTimeToSystemTime
FileTimeToDosDateTime
GetModuleFileNameA
GetFileInformationByHandle
GetFileType
MapViewOfFile
CreateFileMappingA
DuplicateHandle
GetCurrentProcess
SystemTimeToFileTime
UnmapViewOfFile
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
ExitProcess
GetSystemTimeAsFileTime
GetEnvironmentVariableA
GetPrivateProfileIntA
WaitForSingleObject
CloseHandle
CopyFileA
ResumeThread
CreateDirectoryA
GetLocalTime
GetCurrentDirectoryA
SetFilePointer

user32

GetMessagePos
GetWindowRect
SetCursor
LoadCursorA
GetSystemMetrics
SetTimer
SetFocus
PostQuitMessage
GetDesktopWindow
KillTimer
ShowWindow
GetWindowTextA
SetWindowLongA
CreateWindowExA
SetWindowPos
GetWindowLongA
DefWindowProcA
BeginPaint
GetClientRect
GetDlgItem
SetWindowTextA
DialogBoxParamA
GetSysColor
FillRect
GetParent
DrawTextA
EndPaint
LoadIconA
GetAsyncKeyState
SetDlgItemTextA
MessageBoxA
GetDlgItemTextA
SendMessageA
EnableWindow

gdi32

SelectObject
SetTextColor
CreateSolidBrush
TextOutA
SetBkColor
SetBkMode
CreateFontIndirectA
GetObjectA
DeleteObject

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA

ole32

CoInitialize
CoUninitialize

shlwapi

PathFindFileNameA
SHGetValueA
PathAddBackslashA
PathRemoveFileSpecA
PathAppendA
PathFileExistsA

msvcp71

?_Nomemory@std@@YAXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

msvcr71

_onexit
__dllonexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
_except_handler3
__security_error_handler
_callnewh
malloc
_tzset
??_V@YAXPAX@Z
mktime
_stricmp
strncmp
atol
??0exception@@QAE@XZ
??1exception@@UAE@XZ
sprintf
??0exception@@QAE@ABV0@@Z
_beginthreadex
atoi
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
fclose
ftell
fseek
fopen
strncpy
fread
strchr
fgets
_snprintf
fprintf
_controlfp

wininet

InternetWriteFile
HttpSendRequestA
InternetSetCookieA
HttpAddRequestHeadersA
HttpOpenRequestA
HttpEndRequestA
HttpSendRequestExA
InternetAttemptConnect
InternetConnectA
InternetOpenA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2a59752aed6136c123ee2bd468c8a852

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

shell32

ole32

shlwapi

msvcp71

msvcr71

wininet

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 104KB - Virtual size: 104KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 104KB - Virtual size: 104KB