74ac2680541543279f81689099e6410f

Sharing

Copy URL Twitter E-mail

General

Target

74ac2680541543279f81689099e6410f
Size

308KB
MD5

74ac2680541543279f81689099e6410f
SHA1

d169337ba44294c2368f1cef60d9cab99374d338
SHA256

ddd51d051fa15e932c89e83b7ab16b5a669bac19f2f56e5f521f04a8b65d4b87
SHA512

4654c9dd3237712c13f603c5afc9d0dd928ac9abb386a4d2e409261b6d2150a4d41e3ac565059f78bfa539158b80d79a07c08890eece2ec944ba3e58824701cb
SSDEEP

6144:1TPEALEG7knekYpp2eiMoyMPtq0xcTDWpYn9oypnm5HojEfdzQkE7I:1TPlY652eiMoym4UsDW493lAfdzQkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74ac2680541543279f81689099e6410f

Files

74ac2680541543279f81689099e6410f
.exe windows:4 windows x86 arch:x86

66f3e2e94bfd5c72717245874d16c6a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatA
GetSystemDirectoryA
GetWindowsDirectoryA
GetCommandLineA
GetVersionExA
CreateMutexA
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcmpA
GetSystemTime
LocalFree
LocalAlloc
GetVersion
GetSystemInfo
GetComputerNameA
SetEndOfFile
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
lstrcpynA
GetCPInfo
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
RtlUnwind
TerminateProcess
HeapAlloc
HeapFree
GetExitCodeProcess
SetFileTime
GlobalMemoryStatus
GetShortPathNameA
CreateProcessA
SetErrorMode
WritePrivateProfileStringA
WritePrivateProfileSectionA
MoveFileExA
GetCurrentProcess
ExitProcess
WideCharToMultiByte
GetModuleFileNameA
RemoveDirectoryA
GetFileTime
VerLanguageNameA
CompareFileTime
CopyFileA
GetFileSize
GetLogicalDriveStringsA
FreeLibrary
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLastError
LCMapStringW
MultiByteToWideChar
SetFileAttributesA
GetTempPathA
GetFileAttributesA
CreateDirectoryA
GetLocaleInfoA
FindFirstFileA
lstrcmpiA
FindNextFileA
FindClose
GetDriveTypeA
lstrcatA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetTickCount
Sleep
GetCurrentThread
QueryPerformanceFrequency
QueryPerformanceCounter
GetThreadPriority
SetThreadPriority
GlobalReAlloc
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
MulDiv
lstrlenA
WriteFile
ReadFile
lstrcpyA
SetFilePointer
CreateFileA
CloseHandle
DeleteFileA

user32

FindWindowA
IsIconic
PostMessageA
RegisterClassA
GetClientRect
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ExitWindowsEx
WaitMessage
KillTimer
SetWindowPos
LoadBitmapA
GetDlgItemTextA
CreateDialogParamA
SetDlgItemTextA
SendDlgItemMessageA
GetSystemMetrics
RegisterClassExA
ChildWindowFromPoint
GetWindowLongA
IsDialogMessageA
GetDC
ReleaseDC
GetActiveWindow
MessageBoxA
CopyRect
FillRect
DrawEdge
EndDialog
DestroyWindow
DefWindowProcA
GetWindowRect
SetRectEmpty
GetDesktopWindow
EnumDisplaySettingsA
SetTimer
SystemParametersInfoA
SetForegroundWindow
DialogBoxParamA
EnableWindow
SetCursor
InvalidateRect
LoadIconA
LoadImageA
PostQuitMessage
SendMessageA
ScreenToClient
GetCursorPos
GetSysColor
GetWindowTextLengthA
GetWindowTextA
GetDlgItem
CreateWindowExA
SetWindowLongA
SetFocus
GetSystemMenu
DeleteMenu
AppendMenuA
ShowWindow
SetWindowTextA
LoadCursorA

gdi32

SaveDC
SetMapMode
SetViewportOrgEx
RestoreDC
StartDocA
TextOutA
SetBkMode
SelectObject
CreateFontA
GetDeviceCaps
BitBlt
DeleteDC
DeleteObject
CreateSolidBrush
GetStockObject
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
StretchDIBits
GetTextExtentPoint32A
CreateBitmap
CreateDIBitmap
CreatePalette
AddFontResourceA
CreateScalableFontResourceA
RemoveFontResourceA
EndDoc
StartPage
EndPage

comdlg32

GetOpenFileNameA
PrintDlgA

advapi32

RegCloseKey
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
OpenThreadToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
GetUserNameA
RegSetValueExA
RegCreateKeyExA
OpenProcessToken
RegQueryValueExA

shell32

SHFileOperationA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHChangeNotify

ole32

CoUninitialize
CoInitialize
OleUninitialize
CoCreateInstance
OleInitialize

oleaut32

RegisterTypeLi
LoadTypeLi

winmm

waveOutGetNumDevs
midiOutGetNumDevs
joyGetPos

comctl32

ord17
ImageList_Create
ImageList_Add

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66f3e2e94bfd5c72717245874d16c6a4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winmm

comctl32

version

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 337KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 337KB

.rsrc
Size: 4KB - Virtual size: 4KB