79df213e43a2a9cd9bacaf14e075caae

Sharing

Copy URL

Twitter E-mail

General

Target

79df213e43a2a9cd9bacaf14e075caae
Size

113KB
MD5

79df213e43a2a9cd9bacaf14e075caae
SHA1

dc2e2c77871e24693b720bd18ceaa0d3dbb64dba
SHA256

c6437a41bbd98741c89f3f14dbac6f0e0246f5ce43e8554eff6d1dc043ec54fb
SHA512

9caa65b14b0d7b92c05a8013d64f2b833eb22baa440318a2a5c64267c0c71533ad3b743542065b0cef5190ed706b96bad3291800205dba067a1ea926168b5df2
SSDEEP

1536:1jcVkr3+rTgTGCCuGnmj6E/fik9wfkHocQaKxN/u3abo8qHh8Oqp3DD:1g43RzZ6E/fiBcpQf/5o8qBOtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79df213e43a2a9cd9bacaf14e075caae

Files

79df213e43a2a9cd9bacaf14e075caae
.exe windows:4 windows x86 arch:x86

2c653a4cc4d18987f2ef5a14d9f7bc4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetFileSize
GetFileTime
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
WritePrivateProfileStringA
ExitProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
GetEnvironmentStrings
GlobalFlags
GetCommandLineA
GetStartupInfoA
TlsSetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OpenProcess
TerminateProcess
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
LoadLibraryA
GetProcAddress
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
LocalFree
GetFullPathNameA
FindFirstFileA
lstrcpynA
GetVolumeInformationA
FindClose
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
GetEnvironmentStringsW
MulDiv
DuplicateHandle
GetCurrentProcessId
GetLastError
GlobalGetAtomNameA
GetVersion
lstrcatA
lstrcpyA
GlobalAddAtomA
GlobalFindAtomA
WideCharToMultiByte
GetModuleHandleA
MultiByteToWideChar
InterlockedIncrement
lstrlenA
InterlockedDecrement
SetHandleCount
FindResourceA
FreeLibrary
SetLastError
LockResource
LoadResource
GlobalDeleteAtom
CloseHandle
GetCurrentThread
lstrcmpA
lstrcmpiA
GetStdHandle
GetCurrentThreadId
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

WinHelpA
GetTopWindow
CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
LoadCursorA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
RegisterClassA
GetMenu
GetCapture
GetMenuItemID
GetClassInfoA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
KillTimer
WaitMessage
EndDialog
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
GetWindowThreadProcessId
WindowFromPoint
FindWindowA
wsprintfA
GetSubMenu
GetMenuItemCount
FindWindowExA
GetClassNameA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
SetTimer
LoadIconA
SetActiveWindow
GetForegroundWindow
UnregisterClassA

gdi32

SetBkColor
GetObjectA
SetTextColor
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetMapMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
SetViewportOrgEx
CreateBitmap
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyExA

comctl32

ord17

wsock32

ioctlsocket
WSACleanup
WSAStartup
WSASetLastError
WSAGetLastError
accept
WSAAsyncSelect
bind
htons
htonl
closesocket
gethostbyname
recv
send
inet_ntoa
socket
recvfrom
sendto
connect

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c653a4cc4d18987f2ef5a14d9f7bc4e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

wsock32

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 8KB - Virtual size: 8KB