13157df514a59b3fbb0f8e27bdf21d84

Sharing

Copy URL Twitter E-mail

General

Target

13157df514a59b3fbb0f8e27bdf21d84
Size

354KB
MD5

13157df514a59b3fbb0f8e27bdf21d84
SHA1

2926a616630398d3c3179c20b8aadceffab08e64
SHA256

bb63cd42dfb9b59820f04b0d1bae5e0b4bf6beb178b071f5c6b644657aec0abd
SHA512

6a6c0dee7960925ba7032c20a86d645ffcc7d0be5f561540606cf16b3ca2e8963385806838507288312e8c20b7e3293444978f1fba95ee8b0da2e0787fbbcc12
SSDEEP

6144:RrP1y1eBwhJZH/SWA2F5GhffiSCFHQjpXHz9Su/FaOv9iZABL1Yq18Zh9oEfxXuq:Rrt3BwVH/SWVF5GhHPvzv9DB1KZh9oWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13157df514a59b3fbb0f8e27bdf21d84

Files

13157df514a59b3fbb0f8e27bdf21d84
.exe windows:5 windows x86 arch:x86

42c649866669e4580bce3cb6dbdbeaa3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpynW
lstrlenW
lstrcmpiW
ExitProcess
GetModuleHandleA
GetStartupInfoW
GetCommandLineW
ExpandEnvironmentStringsW
lstrcpyW

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
RegFlushKey

user32

MapDialogRect
SetRect
CreateWindowExW
PostMessageW
DestroyIcon
CheckRadioButton
IsDlgButtonChecked
GetSysColor
IsWindowVisible
GetDialogBaseUnits
GetFocus
UpdateWindow
GetNextDlgTabItem
GetClientRect
DrawFocusRect
LoadCursorA
SetCursor
GetWindowRect
MapWindowPoints
FillRect
InvalidateRect
GetSysColorBrush
LoadBitmapW
GetDesktopWindow
LoadStringA
SendDlgItemMessageA
SetDlgItemTextW
SendMessageA
SetWindowTextA
GetDC
ReleaseDC
WinHelpW
ShowWindow
GetDlgItem
GetWindowTextW
EnableWindow
SetFocus
DialogBoxParamW
PeekMessageA
IsWindowEnabled
LoadIconA
GetUpdateRect
CallWindowProcA
BeginPaint
EndPaint
DrawIcon
wsprintfA
SetWindowPos
GetParent
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
GetDlgItemTextA
SetClassLongA
GetWindowLongA
MonitorFromWindow
GetMonitorInfoW
GetWindow
CopyRect
LoadCursorW
DestroyWindow
SystemParametersInfoA
MessageBoxExW
PostMessageA
RegisterClipboardFormatA
CreateWindowExA
MoveWindow
GetWindowDC
SetCapture
SetWindowLongA
ReleaseCapture
GetWindowLongW
DrawTextExW
SendDlgItemMessageW
EndDialog
SetWindowLongW
SetWindowTextW
SendMessageW
LoadStringW
MessageBoxW

ntdll

RtlAnsiStringToUnicodeString
RtlInitUnicodeString
RtlOemToUnicodeN
NtOpenThreadToken
NtImpersonateAnonymousToken
NtCreateFile
NtFsControlFile
NtSetInformationThread
RtlUnicodeToOemN
NlsMbOemCodePageTag
RtlxUnicodeStringToOemSize
RtlUnicodeStringToOemString
NtOpenProcessToken
NtQueryInformationToken
RtlCopyLuid
NtClose
RtlAllocateHeap
RtlFreeHeap
RtlInitAnsiString
RtlUnicodeStringToAnsiString
RtlFreeUnicodeString
RtlNtStatusToDosError
RtlUnicodeToMultiByteN

ole32

CLSIDFromString
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance

msvcrt

_purecall
malloc
_initterm
memcpy
free
memset
_onexit
__dllonexit
_adjust_fdiv
_itow
realloc

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42c649866669e4580bce3cb6dbdbeaa3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

ntdll

ole32

msvcrt

Sections

.text Size: 95KB - Virtual size: 95KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 204KB - Virtual size: 211KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 95KB - Virtual size: 95KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 204KB - Virtual size: 211KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB