174a767c12b207472929dce7583884be

Sharing

Copy URL Twitter E-mail

General

Target

174a767c12b207472929dce7583884be
Size

79KB
MD5

174a767c12b207472929dce7583884be
SHA1

038b2723115a08d8f7b30d9ce9b6dff251758863
SHA256

8e0d14183001c742d9c14893c0f8a82c8bfb003bb2e497122b044a1ce3b08f13
SHA512

1c18082fb7011fef9f5c605064852d7dcc9031be5ef4d949989b363fdfee6d3c8a263d030f33e6298fe945c8641a230fbbc1a5b4c4b48a373c06ac06a0c999c0
SSDEEP

1536:c5+VWdmEsL54KxjjEEIPQNiTQMFVJZzFWz5fGy:u++mBLSyjCok7FWtfGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
174a767c12b207472929dce7583884be

Files

174a767c12b207472929dce7583884be
.exe windows:5 windows x86 arch:x86

8663c1113208ff983869711f33ab460c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MoveWindow
RegisterClassW
GetMenu
GetWindowTextLengthA
GetCursorPos
SendMessageW
TrackPopupMenu
LoadStringW
LoadIconA
AllowSetForegroundWindow
GetActiveWindow
GetSubMenu
PostMessageW
SetActiveWindow
CreateWindowExW
OpenClipboard
CheckMenuItem
GetWindowLongW
DestroyMenu
PtInRect
DestroyIcon
GetClientRect
SetWindowPos
ReleaseDC
SetCapture
GetMenuStringW
InflateRect
SetWindowTextW
UnregisterClassA
DefWindowProcW

kernel32

GetFileSize
InterlockedIncrement
SetSystemPowerState
GetCalendarInfoW
CreateDirectoryExA
TlsAlloc
CreateThread
RaiseException
FindFirstVolumeA
SetThreadExecutionState
FlushFileBuffers
GetStartupInfoA
ClearCommError
MultiByteToWideChar
_lcreat
GetProcessIoCounters
FreeLibrary
CloseHandle
QueryPerformanceCounter
GetTickCount
FindNextVolumeA
TlsGetValue
CreateJobObjectA
EnumSystemLocalesW
GetLastError
GetModuleHandleA
GetProcAddress
InterlockedDecrement
ReadConsoleInputW
GetSystemTimeAsFileTime
TerminateJobObject
ReadConsoleA
GetFileType
EnumUILanguagesW
TlsSetValue
GetCurrentProcessId
GetProcessHeap
TerminateProcess
GetCommandLineA
DefineDosDeviceA
GetACP
SetEvent
GetStdHandle
GetFileSizeEx
RegisterWaitForSingleObject
WideCharToMultiByte
HeapReAlloc
GetCurrentProcess
SetupComm
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
Sleep
GetCPInfo
WriteFile
SetUnhandledExceptionFilter
PurgeComm
LocalSize
GetVolumeNameForVolumeMountPointA
CreateFileW
GetCurrentThreadId
GetVersionExA

gdi32

CreateRectRgn
CreateFontIndirectW
CreateDCA
CreatePolygonRgn
CreateSolidBrush

shlwapi

StrToIntW
PathRemoveFileSpecW
PathRemoveFileSpecA
StrStrIA
PathIsFileSpecW
PathCanonicalizeW
StrCmpIW
PathStripToRootW
PathRemoveBlanksW
PathAddBackslashA
PathIsRelativeW
StrCmpNIW
SHDeleteKeyW
PathCommonPrefixW
AssocQueryStringW
StrStrW
PathRemoveBackslashW
PathAddBackslashW
PathFileExistsW
StrCmpNW
PathAppendW
StrCmpW
PathAppendA
PathRemoveExtensionW
PathFindExtensionW
PathIsRootW
PathFindFileNameW
PathFindFileNameA
PathIsDirectoryW
PathIsURLW
PathRenameExtensionW
PathCombineW
PathRelativePathToW
PathFindExtensionA
PathIsUNCW
SHGetValueW
SHCreateStreamOnFileW
PathStripPathW
StrToIntExW
StrStrIW
SHDeleteValueW
PathFileExistsA

setupapi

SetupQueryInfFileInformationA

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strlen

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8663c1113208ff983869711f33ab460c

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

shlwapi

setupapi

msvcrt

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 48KB - Virtual size: 132KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 48KB - Virtual size: 132KB

.rsrc
Size: 14KB - Virtual size: 13KB