19489962a015d380a6781c6b962829a4

Sharing

Copy URL

Twitter E-mail

General

Target

19489962a015d380a6781c6b962829a4
Size

164KB
MD5

19489962a015d380a6781c6b962829a4
SHA1

2b9a02fd9c260494c9dec46ba92bc235ffc0b14c
SHA256

786095e298b90adfd3f682c75f3d7c6980f2a72c9924539c823b9c1b510632c0
SHA512

423020705237eff617a290aeec7f58eabbfd177862c0da7670803e0d31cb6fc3bca2b190decf3a38ab953e7518704b09dbce29b48106394f23cc840333c2d423
SSDEEP

3072:MhvQfQPydVroh0MLdvF1J18mTvPvCLNFZzHq/Ka683ea6m666szz/:M6fQPQVr6PLfhvCL/ZzHK683ea6m6668

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19489962a015d380a6781c6b962829a4

Files

19489962a015d380a6781c6b962829a4
.exe windows:4 windows x86 arch:x86

9c8e3ce9c1d63c1c0e2697ddaa36b99b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetModuleHandleA
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
GetModuleFileNameA
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
GetLastError
CreateDirectoryA
GetFileAttributesA
GetWindowsDirectoryA
GetProcAddress
DeleteFileA
CopyFileA
GetCurrentThreadId
HeapDestroy
DeleteCriticalSection
GetLocalTime
MultiByteToWideChar
MoveFileExA
GetVersion
InterlockedIncrement
lstrlenW
FlushInstructionCache
GetCurrentProcess
WideCharToMultiByte
HeapValidate
LoadLibraryA
CreateMutexA
FreeLibrary
HeapReAlloc
Sleep
GetThreadLocale
GetStartupInfoA
ExitProcess
GetCommandLineA
DebugBreak
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
GetProcessHeap
HeapAlloc
ReadFile
HeapFree
lstrcpyA
lstrcpynA
CompareStringA
CreateFileA
GetFileTime
FileTimeToSystemTime
lstrcmpA
CloseHandle
lstrcatA
SystemTimeToFileTime
CompareFileTime
FindResourceA
SizeofResource
LoadResource
LockResource
lstrlenA
ReleaseMutex
RtlUnwind

advapi32

RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

comctl32

ord17

gdi32

DeleteDC
GetObjectA
DeleteObject
BitBlt
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectA
GetStockObject

ole32

CLSIDFromProgID
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromString
CoCreateInstance
CoInitialize
OleInitialize
OleUninitialize
CoUninitialize

oleaut32

DispCallFunc
OleLoadPicture
SysAllocString
LoadRegTypeLi
SysStringLen
VariantClear
SysAllocStringLen
VariantInit
SysFreeString
OleCreateFontIndirect

shell32

SHAppBarMessage
Shell_NotifyIconA
ExtractIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHFileOperationA

urlmon

URLDownloadToCacheFileA

user32

GetClassInfoExA
DefWindowProcA
SetWindowLongA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetSysColor
SetFocus
IsChild
GetFocus
ReleaseDC
CallWindowProcA
EndPaint
BeginPaint
RedrawWindow
GetClassNameA
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRgn
CreateWindowExA
SetDlgItemTextA
CharUpperA
DialogBoxParamA
EndDialog
IsDlgButtonChecked
EnableWindow
GetDlgItemTextA
PostMessageA
LoadStringA
DestroyIcon
TrackPopupMenuEx
LoadCursorA
GetSubMenu
LoadMenuA
CheckDlgButton
EnumWindows
IsWindowEnabled
IsWindowVisible
FindWindowA
TrackPopupMenu
DestroyMenu
GetActiveWindow
MessageBoxA
ShowWindow
GetClientRect
GetSysColorBrush
GetWindowRect
ScreenToClient
GetDlgCtrlID
KillTimer
IsWindow
GetDC
FillRect
RegisterClassExA
GetWindowLongA
GetParent
GetWindow
SystemParametersInfoA
SetMenuDefaultItem
SetWindowPos
GetDesktopWindow
UpdateWindow
RegisterWindowMessageA
CharLowerBuffA
wsprintfA
CharNextA
IsDialogMessageA
PostQuitMessage
DestroyWindow
CreateDialogParamA
SetTimer
GetDlgItem
SendMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
LoadIconA
GetCursorPos
CreatePopupMenu
SetForegroundWindow
AppendMenuA
MapWindowPoints

wininet

DeleteUrlCacheEntry

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c8e3ce9c1d63c1c0e2697ddaa36b99b

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

gdi32

ole32

oleaut32

shell32

urlmon

user32

wininet

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 17KB

.rsrc Size: 76KB - Virtual size: 75KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 17KB

.rsrc
Size: 76KB - Virtual size: 75KB