77c8dc0f7956184c3f4d9414c6350ded

Sharing

Copy URL Twitter E-mail

General

Target

77c8dc0f7956184c3f4d9414c6350ded
Size

144KB
MD5

77c8dc0f7956184c3f4d9414c6350ded
SHA1

69541feee72dc360d60ed4cd0792e466241a9f0a
SHA256

35fffda6a5d6494367e23b914ed31bd61ac3a287f91352902292f1a740e60e9c
SHA512

b85c4c3ac07156afc9401cda0cfa9b920513c7b4926516cad3ccc8b534042322cd27a559056bb61a86f37c1de72598b301d76e9eac87ffe6c3937d3d90cda531
SSDEEP

3072:coAtuxNeV8atxi4ImUi1Tk2BUcqDgwmCz9T8vD3TurV5:coAoeV8jw62BUWDlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77c8dc0f7956184c3f4d9414c6350ded

Files

77c8dc0f7956184c3f4d9414c6350ded
.exe windows:4 windows x86 arch:x86

cdb48d583892604d0aa3d4e8b8268d5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassA
LoadIconA
DefWindowProcA
PostQuitMessage
DestroyMenu
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
CreatePopupMenu
MessageBoxA
DialogBoxIndirectParamA
CreateWindowExA
SetDlgItemTextA
SetFocus
SendMessageA
EnableWindow
SetWindowTextA
GetDlgItem
CheckDlgButton
GetDlgItemTextA
IsDlgButtonChecked
SetMenuItemInfoA
AppendMenuW
ShowWindow
LoadImageA
GetMessageA
DispatchMessageA
TranslateMessage
DestroyWindow

shell32

SHGetPathFromIDListA
CommandLineToArgvW
SHBrowseForFolderA
ShellExecuteA
Shell_NotifyIconA

comdlg32

GetOpenFileNameA

ws2_32

setsockopt
gethostname
ntohl
htonl
WSAGetLastError
send
recv
htons
ntohs
WSAStartup
closesocket
inet_ntoa
ioctlsocket
connect
socket
getsockname
listen
bind
getsockopt
accept
sendto
recvfrom
getpeername
__WSAFDIsSet
select
shutdown
gethostbyname

advapi32

CreateServiceW
ChangeServiceConfig2A
OpenServiceW
DeleteService
CloseServiceHandle
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
OpenSCManagerA

msvcrt

_acmdln
_XcptFilter
__getmainargs
__p___argv
__p___argc
wcsncat
strncat
_fullpath
strcpy
signal
freopen
printf
exit
remove
rename
_rmdir
wcschr
fputs
_beginthread
fwrite
fread
_wfopen
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_strdup
_adjust_fdiv
memmove
calloc
free
memcmp
memcpy
fclose
_pctype
_isctype
__mb_cur_max
strchr
fgets
fopen
strstr
strncmp
realloc
srand
rand
abort
memset
malloc
_chdir
time
fprintf
_iob
strlen
tolower
strncpy
fflush
fputc
vfprintf
wcscat
_ftol
strcmp
_vsnprintf
memchr
sscanf
strerror
_errno
atoi
_atoi64
fseek
_snprintf
strftime
gmtime
strtoul
strrchr
localtime
wcslen
toupper
getenv
fgetc
_wstati64

kernel32

ReadFile
GetLastError
WriteFile
GetCurrentProcess
GetStdHandle
CreatePipe
DuplicateHandle
CreateProcessW
CloseHandle
MultiByteToWideChar
GetLocalTime
SystemTimeToFileTime
WideCharToMultiByte
FindNextFileW
FindClose
SetLastError
GetFileAttributesW
FindFirstFileW
GetStartupInfoA
FormatMessageA
GetModuleFileNameW
GetCurrentDirectoryW
TerminateThread
GetCommandLineW
LocalFree
GetModuleHandleA
GetFullPathNameW
Sleep
SetHandleInformation

Exports

Exports

rmdir

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdb48d583892604d0aa3d4e8b8268d5b

Headers

File Characteristics

Imports

user32

shell32

comdlg32

ws2_32

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 20KB - Virtual size: 17KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 20KB - Virtual size: 17KB

.rsrc
Size: 20KB - Virtual size: 19KB