0238bc28585a39645b4918b3e3a723f9

Sharing

Copy URL

Twitter E-mail

General

Target

0238bc28585a39645b4918b3e3a723f9
Size

2.4MB
MD5

0238bc28585a39645b4918b3e3a723f9
SHA1

d0afda9a1a8a4bab2f60110dce61426737156d3c
SHA256

41e834db73a148df9bfe7b0dc80c4b628075fd5abace215d492ee816ebf95317
SHA512

85acf126e62db1ad5ca7605c22442ae062099f393ba0968b192b167cf8516b7ac135ad6f3fdeadebaed94168bd13e7753a18e1fc987db1c66c6277432e2c199b
SSDEEP

49152:tP/PR5iTdweXvchZxtZceZZqy2dg8jfzpQCB:5PviTb0zxtZbHr2dg8jfdQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0238bc28585a39645b4918b3e3a723f9

Files

0238bc28585a39645b4918b3e3a723f9
.exe windows:4 windows x86 arch:x86

167ab12c68c0499597bf170a9cc4d50c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
VariantChangeTypeEx
SafeArrayPutElement
VariantCopyInd
VariantClear

kernel32

lstrcmpiW
Sleep
SetHandleCount
TlsAlloc
LoadResource
IsValidLocale
GetCommandLineA
FindResourceW
GetStdHandle
LocalAlloc
EnterCriticalSection
FreeEnvironmentStringsW
GetProcAddress
GetLastError
TerminateProcess
GetCurrentThreadId
GetFileSize
WideCharToMultiByte
GetCurrentDirectoryA
GetSystemTimeAsFileTime
HeapCreate
LoadLibraryExA
SetStdHandle
ReadConsoleW
MultiByteToWideChar
AreFileApisANSI
SetFileAttributesA
SetEvent
LockResource
MapViewOfFile
ReadFile
UnhandledExceptionFilter
VirtualAlloc
FindFirstFileW
HeapAlloc
LeaveCriticalSection
QueryPerformanceCounter
RtlUnwind
InterlockedExchange
SetLastError
SetThreadPriority
GetStringTypeA
GlobalLock
CloseHandle
SetUnhandledExceptionFilter
GetVersionExW
GlobalAlloc
SetFilePointer
WriteFile
GetModuleHandleA
WritePrivateProfileStringW
ExpandEnvironmentStringsW
LoadLibraryA
GetFileType
HeapDestroy
HeapReAlloc
GetModuleHandleW

gdi32

CreateSolidBrush
CreateBrushIndirect
SelectObject
CreateFontW
CreateDCW
GetBkColor
CreateFontIndirectA
CreateCompatibleDC
EndPage
CreateFontIndirectW
SetWindowExtEx
GetDIBits
DeleteObject
FrameRgn
SetTextColor
GetDeviceCaps
SetPixel
SetBkMode
SetBkColor
SetDCPenColor
RectVisible
GdiFlush
DeleteDC
GetCurrentPositionEx
RealizePalette
TextOutW

comctl32

ImageList_SetImageCount
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Destroy
ImageList_ReplaceIcon

shell32

StrStrA
StrChrA

advapi32

RegOpenKeyA
RegisterEventSourceW
RegDeleteKeyA
CopySid
RegSetValueExW
OpenProcessToken
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
AllocateAndInitializeSid
RegEnumValueA
CryptHashData
RegOpenKeyExA

shlwapi

PathFindExtensionA
PathFindExtensionW
StrToIntA
PathRemoveFileSpecW
PathRemoveBackslashW
PathStripToRootW
PathCompactPathExW
UrlUnescapeW
PathStripPathW
PathFileExistsW
StrTrimA

user32

EnableWindow
DestroyMenu
KillTimer
GetDC
UpdateWindow
DestroyWindow
MsgWaitForMultipleObjects
ShowWindow
MessageBoxW
LoadCursorA
GetDlgItem
OffsetRect
SetCursor
GetSysColor
GetMenuItemCount
CharToOemA
GetWindowThreadProcessId
ClientToScreen
OpenClipboard
GetSubMenu
TranslateAcceleratorW
CharLowerA
GetWindowLongW
LoadBitmapW
GetWindowLongA
IsWindow
SetWindowPos
GetSysColorBrush
DrawTextA
SetWindowLongW
CallWindowProcW
MoveWindow
DrawFrameControl
GetParent
PeekMessageA
AppendMenuW
LoadImageW
IsWindowEnabled
GetNextDlgTabItem
SendMessageW
InvalidateRect
GetMenuState
ExitWindowsEx
SetDlgItemTextW
UnregisterClassW
ReleaseCapture
SetActiveWindow
BringWindowToTop
wsprintfA
LoadBitmapA
SystemParametersInfoA
GetSystemMetrics
LoadCursorW
PostQuitMessage
GetClientRect
TranslateMessage
GetMenu
SetWindowTextW
EndDialog
SetWindowsHookExW
GetFocus
WindowFromPoint
BeginPaint
GetWindowRect
CharNextA
CharUpperW
RegisterClassA
CallNextHookEx
LoadStringW
CreateDialogParamW

msvcrt

wcscpy
_getche
_controlfp
__set_app_type
_vsnwprintf
swprintf
_initterm
_XcptFilter
_makepath
qsort
_wfopen
malloc
_adjust_fdiv
fclose
__getmainargs
free
calloc
wcsncpy
_except_handler3
_exit

Sections

.text
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

167ab12c68c0499597bf170a9cc4d50c

Headers

File Characteristics

Imports

oleaut32

kernel32

gdi32

comctl32

shell32

advapi32

shlwapi

user32

msvcrt

Sections

.text Size: 204KB - Virtual size: 200KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 188KB - Virtual size: 184KB

.text
Size: 204KB - Virtual size: 200KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 188KB - Virtual size: 184KB