04b2484f2cd7b6bb5a329f5bc0eed049

Sharing

Copy URL

Twitter E-mail

General

Target

04b2484f2cd7b6bb5a329f5bc0eed049
Size

752KB
MD5

04b2484f2cd7b6bb5a329f5bc0eed049
SHA1

e43373b66f86cce9b2e396b27987b210cd50ecdc
SHA256

7f9c1e050da1957282e6a98dde7fc304ef87e4b77cc90dfcb8c432e487ecdb0b
SHA512

f8b485b1582a16f1f4b650b46aebff7bc600282fe0061ea593db05f16e6bc809d199e83df80a35637dbdf350125631f9230d0cab8360fb645d3a2dd7a2102f26
SSDEEP

12288:nO4M7lQcQtZEMABXInUYecsDTesR2vlUW2iP66zTKq/u2JiY/oVs04Cc:nObQ7EHBYJST7EDryCTzXboA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b2484f2cd7b6bb5a329f5bc0eed049

Files

04b2484f2cd7b6bb5a329f5bc0eed049
.exe windows:4 windows x86 arch:x86

ef64c84732e2b450453eefb18a529ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
FileTimeToLocalFileTime
LCMapStringW
EnterCriticalSection
LockResource
CompareStringA
TlsGetValue
ResetEvent
InterlockedExchange
HeapDestroy
GetLocaleInfoA
GetCurrentThreadId
CloseHandle
GetProcAddress
GetDriveTypeA
GetStartupInfoA
GetStringTypeA
GetTimeFormatA
UnhandledExceptionFilter
GetConsoleOutputCP
SetUnhandledExceptionFilter
IsValidCodePage
lstrcmpiW
FreeEnvironmentStringsW
lstrlenA
SetThreadPriority
DeleteCriticalSection
TlsAlloc
DeleteFileA
SetHandleCount
GetVersionExW
ExpandEnvironmentStringsA
GetCurrentProcess
ExitProcess
GetConsoleCP
LocalFileTimeToFileTime
VirtualQuery
HeapFree
RtlUnwind
GetLocalTime
SetEndOfFile
GetModuleFileNameW
GetCPInfo
FlushFileBuffers
TerminateProcess
TerminateThread
TlsSetValue
InterlockedCompareExchange
WideCharToMultiByte
GetModuleFileNameA
MulDiv
IsDebuggerPresent
MultiByteToWideChar
GetCommandLineA
lstrlenW
CreateMutexW
VirtualAlloc
GetTickCount
WriteConsoleA
GetProcessHeap
CreateFileW
CreateProcessA
WaitForSingleObject
GetStringTypeW
SetStdHandle
SetEnvironmentVariableA
GetACP
HeapAlloc
lstrcpyW
FindClose
WriteConsoleW
HeapCreate
InterlockedDecrement
GetFileType
GetFileTime
GetSystemTimeAsFileTime
GetDateFormatA
GetModuleHandleW
GetEnvironmentStrings
Sleep
LCMapStringA
ReadFile
lstrcatW
lstrcpynW
VirtualFree
HeapSize
FreeEnvironmentStringsA
GetCurrentProcessId
GetStdHandle
SetLastError
OutputDebugStringW
GetModuleHandleA
InitializeCriticalSection
GetEnvironmentStringsW
InterlockedIncrement
GlobalLock
GetVersionExA
WriteFile
GetLastError
GetFileAttributesA
QueryPerformanceCounter
IsProcessorFeaturePresent
TlsFree
CompareStringW
HeapReAlloc
SetFilePointer
GetTimeZoneInformation
CreateFileA
GetConsoleMode
LoadLibraryA
FreeLibrary
GetCommandLineW
GetStartupInfoW
RaiseException
GetOEMCP
LoadLibraryW

oleaut32

LoadTypeLi

advapi32

RegEnumValueA
ChangeServiceConfigA
RegCreateKeyExA
DeleteService
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
QueryServiceStatus
CreateServiceA
RegDeleteValueA
SetSecurityDescriptorDacl
StartServiceA
CloseServiceHandle
RegSetValueExA
RegOpenKeyA
OpenServiceA
RegCreateKeyA
RegDeleteKeyA
RegCloseKey
RegEnumKeyA
RegQueryValueA
OpenSCManagerA
GetUserNameA
FreeSid
OpenThreadToken

version

VerQueryValueA
GetFileVersionInfoA

wininet

InternetOpenW
HttpOpenRequestW
InternetAttemptConnect
HttpQueryInfoW
InternetCrackUrlW
InternetOpenUrlW
InternetReadFile

shell32

SHGetDesktopFolder
DragAcceptFiles
DragQueryPoint
SHGetMalloc

shlwapi

StrCpyW
StrCmpW
PathStripToRootW
PathRemoveFileSpecW

winspool.drv

OpenPrinterA
DeviceCapabilitiesA
GetPrinterA
ord204
EnumPrintersA
ClosePrinter
OpenPrinterW

user32

UpdateWindow
GetParent
SetCapture
PostQuitMessage
TranslateAcceleratorW
OpenClipboard
InsertMenuW
SetWindowPlacement
KillTimer
BeginPaint
DestroyCursor
GetDlgItem
DispatchMessageW
GetDlgItemInt
SetClipboardData
GetScrollInfo
GetWindowDC
GetDC
LoadImageW
CallWindowProcW
GetKeyState
GetMenuState
GetClientRect
SetScrollPos
IsChild
GetUpdateRect
GetForegroundWindow
GetActiveWindow
MessageBoxW
GetFocus
DestroyWindow
BeginDeferWindowPos
EndPaint
DestroyAcceleratorTable
IsIconic
SetMenuDefaultItem
GetSysColor
SetDlgItemInt
GetDlgCtrlID
SystemParametersInfoW
UnregisterClassA
GetWindowThreadProcessId
IsDlgButtonChecked
UnhookWindowsHookEx
MapDialogRect
EnumChildWindows
IsWindowVisible
SetRectEmpty
UnregisterClassW
SetWindowLongW
GetWindow
ScrollWindow
GetTopWindow
MapVirtualKeyW
TrackPopupMenu
GetSystemMetrics
IsWindowEnabled
DrawTextW
GetCursorPos
LockWindowUpdate
DrawIconEx
wsprintfW
MoveWindow
InvalidateRect
EnableMenuItem
SetFocus
SetForegroundWindow
LoadBitmapW
EndDeferWindowPos
TrackPopupMenuEx
SetCursor
ReleaseDC
CheckMenuItem
GetMenuItemCount
CloseClipboard
GetSubMenu
IsZoomed
LoadIconW
SetWindowPos
LoadAcceleratorsW
GetClassInfoW
GetDesktopWindow
LoadStringW
RegisterClassW
FindWindowW
GetWindowTextW
ReleaseCapture
EnableWindow
PostMessageW
GetClipboardData
DrawFocusRect
CopyRect
OffsetRect
ShowWindow
CreatePopupMenu
UnpackDDElParam
MessageBeep
SetWindowTextW
WindowFromPoint
AdjustWindowRectEx
RedrawWindow
RegisterClassExW
GetMessageW
ChildWindowFromPoint
GetWindowTextLengthW
SetDlgItemTextW

comctl32

ImageList_Draw
ImageList_Destroy
ImageList_DrawIndirect
_TrackMouseEvent
ImageList_GetImageCount

gdi32

GetTextExtentPointA
GetCurrentObject
SetWindowOrgEx
SelectObject
GetWindowOrgEx
StretchDIBits
CreatePalette
CreateCompatibleDC
GetTextExtentPoint32A
FloodFill
SetBkColor
OffsetRgn
MaskBlt
CreateSolidBrush
CreateFontA
GetCurrentPositionEx
BeginPath
SetTextColor
RestoreDC
CreateEllipticRgn
ExtTextOutA
CreatePen
SetPixel
GetFontData
GetTextFaceA
SetPaletteEntries
CreateBrushIndirect
GetWindowExtEx
GetObjectA
CreateFontIndirectA
AbortDoc
CreateRectRgn
CloseMetaFile
OffsetViewportOrgEx
Escape
PolyPolygon
GetPolyFillMode
CreateCompatibleBitmap
ExtSelectClipRgn
SelectPalette
CreatePolygonRgn
Rectangle
ExtCreateRegion
SetRectRgn
CreateDCA
DeleteObject
DPtoLP
SetViewportExtEx
UnrealizeObject
CloseEnhMetaFile
GetViewportOrgEx
CreateMetaFileA
CreateEnhMetaFileA
GetStretchBltMode
SetWindowExtEx
RoundRect
PolyBezier
MoveToEx
RectVisible
Arc
SetPolyFillMode
RectInRegion
PtVisible
EndPath
PtInRegion
SetROP2
CreateRectRgnIndirect
CreateDIBSection
SaveDC
SetPixelV
CreateICA
CreateBitmap
LineTo
TextOutA
GetCharWidthA
Pie
GetRegionData
CombineRgn
SetBrushOrgEx
CreateDIBitmap

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 480KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef64c84732e2b450453eefb18a529ed3

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

version

wininet

shell32

shlwapi

winspool.drv

user32

comctl32

gdi32

Sections

.text Size: 120KB - Virtual size: 116KB

.rdata Size: 480KB - Virtual size: 478KB

.data Size: 116KB - Virtual size: 139KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 120KB - Virtual size: 116KB

.rdata
Size: 480KB - Virtual size: 478KB

.data
Size: 116KB - Virtual size: 139KB

.rsrc
Size: 32KB - Virtual size: 31KB