fce281254d85692fe712452f89607c3c

Sharing

Copy URL Twitter E-mail

General

Target

fce281254d85692fe712452f89607c3c
Size

368KB
MD5

fce281254d85692fe712452f89607c3c
SHA1

150c422d91e97ac517b02ddc7f97ae008b27eb80
SHA256

50f7bbd09a4f3d2f490e299d746029d4651007d8b1b639dcda20801724b3572c
SHA512

41d51e847dbdd4b7afec4ac47f41b8b3e2ac0e007224564e2637592780e561ad7b4d15280264e64ad13d2f85b5f786544e8ce1142447da52bc1262fb419e0391
SSDEEP

6144:RX/7bFk2QWPQ4FYZNJTCsuSZRrW+ozriMn0TQOF9X7UBKDMWi:x/7bFk2QWPQ4FYZNFvA+ozriMn0TQOFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fce281254d85692fe712452f89607c3c

Files

fce281254d85692fe712452f89607c3c
.exe windows:4 windows x86 arch:x86

edb7795421d408fbfe319d69269f8bb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA

comctl32

InitCommonControlsEx
PropertySheetA

gdi32

CreateFontIndirectA
GetObjectA
GetStockObject

kernel32

CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FormatMessageA
FreeLibrary
GetCommandLineA
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVolumeInformationA
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalFree
MultiByteToWideChar
ReleaseSemaphore
ResetEvent
SetEvent
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
lstrcpynA

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_winmajor
abort
atexit
calloc
fputc
fputs
free
fwrite
localtime
malloc
memchr
memcpy
memmove
memset
realloc
signal
sprintf
sscanf
strchr
strcmp
strcpy
strerror
strlen
strncpy
strstr
strtol
time
vfprintf

shell32

ShellExecuteA
Shell_NotifyIconA

user32

ClientToScreen
CreateDialogParamA
DefDlgProcA
DestroyIcon
DestroyMenu
DispatchMessageA
EnableWindow
EndDialog
GetCursorPos
GetDlgItem
GetDlgItemTextA
GetMessageA
GetSubMenu
GetSystemMetrics
GetWindowRect
IsDialogMessageA
IsWindowVisible
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadMenuA
LoadStringA
MessageBoxA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassExA
SendDlgItemMessageA
SendMessageA
SetClassLongA
SetCursor
SetCursorPos
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
bind
closesocket
connect
gethostbyname
htons
ntohs
recv
recvfrom
select
send
sendto
socket

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eh_fram
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 308B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

edb7795421d408fbfe319d69269f8bb7

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

msvcrt

shell32

user32

ws2_32

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 33KB - Virtual size: 32KB

.eh_fram Size: 14KB - Virtual size: 13KB

.bss Size: - Virtual size: 308B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 154KB - Virtual size: 153KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 33KB - Virtual size: 32KB

.eh_fram
Size: 14KB - Virtual size: 13KB

.bss
Size: - Virtual size: 308B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 154KB - Virtual size: 153KB