10fd04a888847e58c490d450da31b2ac

Sharing

Copy URL

Twitter E-mail

General

Target

10fd04a888847e58c490d450da31b2ac
Size

100KB
MD5

10fd04a888847e58c490d450da31b2ac
SHA1

9e512b1803751c6ac83db55ff2a7214290603589
SHA256

acf5fa320cf88c286d3df46336bd0bbdaacb273bd62508c5f61ad1c22adaee49
SHA512

61cb5ba69c147a8b7680d45a4d8a662f54bccef5841b8333dced154927043c7e8a7c326593d2222110dc08bbc3abae82f461dc14742e7b6f51fa8e87a0d158d2
SSDEEP

3072:fF6NaC2IlXz3wi3ZFk2K4Nk02XFJEVEI4luYW:AaMRZZFkL4o1JEVN4lr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10fd04a888847e58c490d450da31b2ac

Files

10fd04a888847e58c490d450da31b2ac
.exe windows:4 windows x86 arch:x86

50fb1373a8066221e9d9a2d478385c05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

realloc
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
mbtowc
isleadbyte
rand
srand
time
??0exception@@QAE@ABV0@@Z
_beginthreadex
_purecall
malloc
??_U@YAPAXI@Z
_wcsicmp
wcsrchr
??_V@YAXPAX@Z
calloc
??2@YAPAXI@Z
free
_iob
__mb_cur_max
wcschr
_vsnwprintf
_wcslwr
_snprintf
_itoa
_except_handler3
memmove
memcpy
memset
ferror
?terminate@@YAXXZ
_controlfp
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_errno
_isatty
gmtime
_mbschr
mktime
wcscspn
??8type_info@@QBEHABV0@@Z
wcsspn
??3@YAXPAX@Z
wcsstr
_CxxThrowException

shlwapi

PathFileExistsW
PathRemoveFileSpecW
PathCombineW
PathAddBackslashW

wininet

InternetReadFile
InternetOpenW
HttpQueryInfoW
InternetOpenUrlW
InternetCloseHandle
InternetGetConnectedState

kernel32

FindFirstChangeNotificationW
VirtualFree
LoadLibraryA
GetVersionExA
HeapSize
HeapReAlloc
HeapDestroy
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
RtlUnwind
OutputDebugStringA
lstrcmpW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetVersionExW
GetUserDefaultLangID
GetVolumeInformationW
MoveFileW
DuplicateHandle
WaitForMultipleObjects
FindCloseChangeNotification
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingW
FindNextChangeNotification
TerminateThread
GetTickCount
InterlockedExchange
MoveFileExW
GetEnvironmentVariableW
GetExitCodeProcess
DeleteFileW
ExitProcess
GetFileSize
GetFileTime
SetFileTime
GetFileAttributesW
WriteFile
WideCharToMultiByte
ReadFile
CreateEventW
MulDiv
lstrcpyW
FindResourceExW
SetLastError
ExpandEnvironmentStringsW
LockResource
GetCurrentProcess
FlushInstructionCache
GetShortPathNameW
ResetEvent
InterlockedIncrement
InitializeCriticalSection
LoadLibraryExW
SizeofResource
HeapAlloc
HeapFree
GetProcessHeap
VirtualAlloc
GetProcAddress
GetModuleHandleW
Sleep
GetTempFileNameW
CreateFileW
CloseHandle
FreeLibrary
lstrlenA
SetFilePointer
ResumeThread
GetTempPathW
SetFileAttributesW
RaiseException
CreateProcessW
GetSystemTimeAsFileTime
LoadLibraryW
lstrcmpiW
MultiByteToWideChar
CreateMutexW
lstrlenW
GetModuleFileNameW
GetLastError
InterlockedDecrement
FindResourceW
WaitForSingleObject
EnterCriticalSection
lstrcatW
DeleteCriticalSection
LeaveCriticalSection
LoadResource
SetEvent
GetCurrentThreadId

user32

FindWindowW
InflateRect
KillTimer
CallNextHookEx
DrawTextW
SetThreadDesktop
BeginPaint
UnregisterClassA
CreateIcon
DestroyIcon
GetDoubleClickTime
GetClassNameW
EnumChildWindows
IsWindow
GetWindowThreadProcessId
GetWindowTextLengthW
IsWindowVisible
GetWindowTextW
EnumWindows
LoadImageW
RegisterClassW
SystemParametersInfoW
SetWindowTextW
GetSystemMenu
DeleteMenu
UpdateWindow
PostQuitMessage
ChangeDisplaySettingsExW
EnableWindow
InvalidateRect
GetSystemMetrics
GetWindowRect
GetDC
GetThreadDesktop
SwitchDesktop
SetWindowPos
CallWindowProcW
ReleaseDC
SetWindowsHookExW
FillRect
ShowCursor
DispatchMessageW
GetMessageW
TranslateMessage
SendMessageW
DestroyWindow
DefWindowProcW
CharNextW
MsgWaitForMultipleObjects
SetWindowLongW
GetClassInfoExW
LoadCursorW
PeekMessageW
CreateWindowExW
RegisterClassExW
MessageBoxW
CloseDesktop
CreateDesktopW
ClientToScreen
SetTimer
ShowWindow
EndPaint
GetClientRect
EnumDisplaySettingsW
UnhookWindowsHookEx
EnumDisplayDevicesW
GetWindowLongW

gdi32

SetDIBitsToDevice
DPtoLP
CreateCompatibleDC
CreateCompatibleBitmap
GetPixel
DeleteObject
SelectObject
DeleteDC
CreateSolidBrush
CreateFontIndirectW
GetDeviceCaps
TextOutW
GetStockObject
SetTextAlign
SetViewportExtEx
SetTextColor
SetBkColor
SetBkMode
SetWindowExtEx

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExA
RegQueryValueExW
RegEnumValueA
RegNotifyChangeKeyValue
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegEnumValueW

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW
Shell_NotifyIconW

ole32

CoCreateGuid
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc

oleaut32

LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
LoadRegTypeLi
VariantInit
SysAllocString
DispCallFunc
SysStringLen

comctl32

InitCommonControlsEx

msimg32

TransparentBlt

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
?_Doraise@runtime_error@std@@MBEXXZ
?what@runtime_error@std@@UBEPBDXZ
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50fb1373a8066221e9d9a2d478385c05

Headers

File Characteristics

Imports

msvcrt

shlwapi

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

msvcp60

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 18KB - Virtual size: 17KB