676e197857ceca6c8cd7acd9c50fea55

Sharing

Copy URL

Twitter E-mail

General

Target

676e197857ceca6c8cd7acd9c50fea55
Size

264KB
MD5

676e197857ceca6c8cd7acd9c50fea55
SHA1

04a0b69ece0b8d642a56f00b16bcad2c5863adef
SHA256

7de99c9334cdd1bbe0f11ebffa83e4cd1cd832f6161ce73516650b7146d6864a
SHA512

fc84b9e8cf16a88328c9dd0d47a73700c131fb80050c0c5d8f487f807f70ad761f51e42be7d211c99a277b81e1b22fa93bcca9440fe9f7d06eba7654f7754be6
SSDEEP

3072:NAbys7rDqAHkzJppLsmivwFvZwUieJNO1AMSgahMqqDa/AoWHT5:NAbLrx+p7OSEJqqDGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
676e197857ceca6c8cd7acd9c50fea55

Files

676e197857ceca6c8cd7acd9c50fea55
.exe windows:4 windows x86 arch:x86

16d98c3d77416990b39ee73cd6c3b014

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
TranslateMessage
SetTimer
RegisterClassA
PostQuitMessage
MessageBoxA
LoadStringA
LoadIconA
KillTimer
GetSystemMetrics
GetSysColor
GetMessageA
FindWindowA
DispatchMessageA
DefWindowProcA
CharNextA
CharToOemA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
CompareStringA
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
WriteFile
WinExec
WaitForSingleObject
VirtualQuery
SizeofResource
SetFileTime
SetFilePointer
SetFileAttributesA
SetEvent
SetEndOfFile
ResetEvent
RemoveDirectoryA
ReadFile
MoveFileA
LockResource
LocalFileTimeToFileTime
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
GetVersionExA
GetThreadLocale
GetSystemDirectoryA
GetSystemDefaultLangID
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCPInfo
FreeResource
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DosDateTimeToFileTime
DeleteFileA
DeleteCriticalSection
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
CompareStringA
CloseHandle
Sleep

wininet

InternetSetOptionA
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

shell32

ShellExecuteA

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16d98c3d77416990b39ee73cd6c3b014

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

wininet

shell32

Sections

.text Size: 220KB - Virtual size: 220KB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 220KB - Virtual size: 220KB

.rsrc
Size: 40KB - Virtual size: 40KB