15a1fd28e15a4ff06859dc5dd92c253d

Sharing

Copy URL

Twitter E-mail

General

Target

15a1fd28e15a4ff06859dc5dd92c253d
Size

572KB
MD5

15a1fd28e15a4ff06859dc5dd92c253d
SHA1

e011f71d06a69d38e7851f428e1b8bad59a2dc0b
SHA256

6c644725a50abfa3feff8a357e18926a7bc3fb8ad839081d87c1ff78084cb4a2
SHA512

c8c364c8de235f0ba7fc543001df0e4d51d399f4f1473201b1ce0a1cbccd1b55c343ae539acd09d9017b4de580ea26a4526def43e4fa63e92ca8a552c3d8e9ce
SSDEEP

12288:Whj2PkWn4eHMD4DYuB/9mWGI9ZSmlnxfg0WU:yWnhHMD4DR/9mW7/Smlnhg0W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a1fd28e15a4ff06859dc5dd92c253d

Files

15a1fd28e15a4ff06859dc5dd92c253d
.exe windows:4 windows x86 arch:x86

fc0e633c2f4a1332921d11728cea0aa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharPrevA
DlgDirListW
WINNLSGetEnableStatus
IsClipboardFormatAvailable
ShowWindow
GetMenuItemCount
GetGuiResources
CopyRect
GetDoubleClickTime
OpenDesktopA
PostQuitMessage
InvalidateRgn
GetForegroundWindow
CreateCursor
DrawTextExA
BroadcastSystemMessageA
CreateWindowStationA
DefWindowProcA
wsprintfW
RegisterClassExA
GetClipboardSequenceNumber
AdjustWindowRect
FindWindowExA
RegisterClassW
SetUserObjectSecurity
DdeInitializeW
CreateWindowExA
DestroyWindow
GetAsyncKeyState
CreateMDIWindowW
BeginDeferWindowPos
SetFocus
EnumDisplayDevicesA
wvsprintfA
SetKeyboardState
EnumClipboardFormats
IsCharLowerA
RegisterClassA
MessageBoxA
GetMenuState
EndDeferWindowPos
GetSysColorBrush
TileWindows
BlockInput
DlgDirListComboBoxA
ReleaseCapture
CloseWindow
SetPropA
GetWindowWord
GetMenuItemID
SetForegroundWindow
GetWindowPlacement
DrawStateW
EnumWindowStationsA
DrawMenuBar
GetWindowRect

shell32

SHEmptyRecycleBinW
SHFreeNameMappings

comctl32

CreateUpDownControl
DrawStatusTextW
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_Destroy
CreateMappedBitmap
ImageList_SetBkColor
ImageList_SetImageCount
InitCommonControlsEx
ImageList_LoadImage
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetImageRect
CreateStatusWindowW
ImageList_DrawEx
CreateToolbarEx

kernel32

GetNumberFormatW
GetCurrentThreadId
GetEnvironmentStrings
LockFileEx
GetExitCodeProcess
GetACP
CreateFileA
GlobalGetAtomNameA
GetConsoleTitleW
GetCPInfo
ConvertDefaultLocale
OpenSemaphoreA
GetTimeZoneInformation
EnumTimeFormatsW
InterlockedExchange
GetSystemTimeAsFileTime
CompareStringW
WaitCommEvent
GetStartupInfoA
LocalReAlloc
CreateDirectoryW
GetModuleFileNameA
GetVersion
GetShortPathNameA
SetThreadLocale
RtlUnwind
GetCurrentProcessId
LoadLibraryA
SetStdHandle
HeapFree
QueryPerformanceCounter
UnhandledExceptionFilter
LeaveCriticalSection
GetDiskFreeSpaceW
GetCurrentProcess
TlsAlloc
SetFilePointer
SetEndOfFile
SetLastError
GetFileAttributesA
TlsGetValue
CreateMailslotA
GlobalFree
EnumCalendarInfoW
GetStdHandle
LockFile
GetUserDefaultLangID
IsValidLocale
HeapAlloc
ReadConsoleOutputW
EnumSystemCodePagesW
CloseHandle
CompareStringA
RemoveDirectoryW
GetVersionExA
InterlockedIncrement
SetFileAttributesA
GetOEMCP
GetCurrentThread
GetLastError
GetFileType
MultiByteToWideChar
OutputDebugStringA
VirtualFree
InitializeCriticalSection
GetStringTypeA
DebugActiveProcess
CreateEventW
GetCommandLineA
OpenMutexA
SetCriticalSectionSpinCount
GetProcAddress
FileTimeToSystemTime
SetComputerNameA
LocalUnlock
LCMapStringA
lstrcatW
TerminateProcess
GlobalFlags
DeleteCriticalSection
GetProfileIntW
SetConsoleScreenBufferSize
EnumDateFormatsExA
GetSystemDefaultLCID
GetSystemDefaultLangID
GlobalAddAtomA
ResetEvent
VirtualUnlock
FreeLibrary
WideCharToMultiByte
VirtualQuery
WritePrivateProfileStructA
GetTempFileNameA
GetLocalTime
GetPrivateProfileSectionNamesA
GetModuleFileNameW
VirtualAlloc
WriteProfileStringW
RtlFillMemory
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
ExpandEnvironmentStringsW
GetFileSize
HeapReAlloc
OpenProcess
HeapDestroy
GetSystemTime
GetPriorityClass
SetEnvironmentVariableA
SetHandleCount
TlsFree
InterlockedDecrement
FreeEnvironmentStringsA
LCMapStringW
GetStringTypeW
FindResourceExW
HeapCreate
GetTickCount
EnterCriticalSection
OpenMutexW
GetEnvironmentVariableW
ReadConsoleInputW
FlushFileBuffers
CreateMutexA
RtlMoveMemory
GetModuleHandleA
ReadFile
IsBadWritePtr
GetThreadPriority
WriteFile
lstrcmp
TlsSetValue

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc0e633c2f4a1332921d11728cea0aa6

Headers

File Characteristics

Imports

user32

shell32

comctl32

kernel32

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 244KB - Virtual size: 240KB

.data Size: 120KB - Virtual size: 146KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 244KB - Virtual size: 240KB

.data
Size: 120KB - Virtual size: 146KB

.rsrc
Size: 16KB - Virtual size: 15KB