05a758f8dd17d8099978cb4436bb0f5d

Sharing

Copy URL

Twitter E-mail

General

Target

05a758f8dd17d8099978cb4436bb0f5d
Size

501KB
MD5

05a758f8dd17d8099978cb4436bb0f5d
SHA1

c13205225098a53174dbbaa6f914edf3a6a75d64
SHA256

01ef66a7c6e9b32708d95d6b1b1f191f3dba7720a26afb975113f18143be60e3
SHA512

12f003229a096cdbd6a0d2e83e5a5c4b999d7c4d15ed510f19eead19bfe154f0d6715efbda00ffd8db51c819e0e3ec02140ea8746253ceaf858059adb6f57c3e
SSDEEP

12288:fcEu2+n5pm0owS9gC7Qq0LWEEkjEWiI28O8k+ZKKJQ:0ET+nnmoCUq0LWE6QO8CKa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05a758f8dd17d8099978cb4436bb0f5d

Files

05a758f8dd17d8099978cb4436bb0f5d
.exe windows:4 windows x86 arch:x86

f97f066f26d79f709dc7d89c55b8dabb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
GetCursorPos
SystemParametersInfoA
UnionRect
UnregisterHotKey
SetUserObjectSecurity
EnumWindowStationsW
RegisterClassA
WINNLSGetEnableStatus

advapi32

RegQueryInfoKeyW
LookupPrivilegeDisplayNameW
RegQueryMultipleValuesA
CryptVerifySignatureA
RegCreateKeyExA
CryptGenKey
RegCloseKey
LookupPrivilegeNameW
RegEnumKeyExW
InitiateSystemShutdownW
RegConnectRegistryA
LookupAccountNameW
RegSetValueA
CryptHashSessionKey
CryptEnumProvidersA

gdi32

CreateFontW
GetGlyphOutline
SelectPalette
EnableEUDC
GetPixelFormat
SetSystemPaletteUse
GetLogColorSpaceA
ExtSelectClipRgn
CreateFontIndirectW
ExtEscape
TranslateCharsetInfo
GetCharABCWidthsFloatW
GetBoundsRect
ScaleWindowExtEx
StretchBlt
GetCharABCWidthsFloatA
SetPixel
ScaleViewportExtEx

kernel32

GetLocaleInfoA
SetEnvironmentVariableA
SetHandleCount
WriteFile
HeapDestroy
HeapSize
FreeEnvironmentStringsW
GetConsoleOutputCP
HeapCreate
GetStdHandle
GetSystemTimeAsFileTime
VirtualFree
SetFilePointer
WideCharToMultiByte
TlsFree
InterlockedIncrement
LCMapStringW
GetDateFormatA
WriteConsoleW
GetCPInfo
GetTimeFormatA
IsValidCodePage
LCMapStringA
GetCommandLineA
HeapFree
DeleteCriticalSection
GetModuleHandleA
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameA
FreeLibrary
GetProcAddress
FreeEnvironmentStringsA
GetTickCount
LoadLibraryA
GetOEMCP
CompareStringA
WriteConsoleA
ReadFile
GetLocaleInfoW
GetCurrentThread
GetStringTypeA
FlushFileBuffers
ExitProcess
EnumSystemLocalesA
IsDebuggerPresent
TlsAlloc
GetModuleHandleW
GetCurrentProcess
QueryPerformanceCounter
GetStringTypeW
GetUserDefaultLCID
UnhandledExceptionFilter
VirtualQuery
Sleep
GetACP
LeaveCriticalSection
CreateWaitableTimerA
InterlockedDecrement
GetFileType
OpenMutexA
CreateMutexA
HeapAlloc
RtlUnwind
CreateFileA
SetUnhandledExceptionFilter
GetDiskFreeSpaceA
TlsGetValue
TlsSetValue
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetTimeZoneInformation
GetEnvironmentStringsW
InterlockedExchange
CompareStringW
IsValidLocale
SetLastError
CloseHandle
HeapReAlloc
GetConsoleCP
GetStartupInfoA
SetStdHandle
SetConsoleCtrlHandler
GetConsoleMode
EnterCriticalSection
VirtualAlloc
GetEnvironmentStrings
FreeLibraryAndExitThread
MultiByteToWideChar

comctl32

InitCommonControlsEx

wininet

ReadUrlCacheEntryStream
RetrieveUrlCacheEntryStreamA
InternetConfirmZoneCrossing
InternetDial
FtpPutFileW
ResumeSuspendedDownload
FtpRemoveDirectoryW
IsUrlCacheEntryExpiredA

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f97f066f26d79f709dc7d89c55b8dabb

Headers

File Characteristics

Imports

user32

advapi32

gdi32

kernel32

comctl32

wininet

Sections

.text Size: 163KB - Virtual size: 162KB

.rdata Size: 10KB - Virtual size: 28KB

.data Size: 314KB - Virtual size: 314KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 163KB - Virtual size: 162KB

.rdata
Size: 10KB - Virtual size: 28KB

.data
Size: 314KB - Virtual size: 314KB

.rsrc
Size: 12KB - Virtual size: 12KB