188c77f97ef751dfd2e788566fae61a0

Sharing

Copy URL Twitter E-mail

General

Target

188c77f97ef751dfd2e788566fae61a0
Size

464KB
MD5

188c77f97ef751dfd2e788566fae61a0
SHA1

35f1aeff978f96f3bc43fcf27b1d9341663000aa
SHA256

f8bad76a6a86b1f6cca558e090c37d5a1c9a20ee6f093d8ddfa51ff670e4bc10
SHA512

ae24d2fa6168c0cd6a0a07a17230f03bcf3065e9e0a4cb700b6016fe837a5633d88225c6f3df39c82447b5ee9337d0546a3deeef022e7f725a52e265eaef4eb0
SSDEEP

12288:d1QdEt3+uPMHB5u6owZJt60tndgOVOvSA4VlX5VS4Gi:PQdSuHHBA6owZJ1tlysSZi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
188c77f97ef751dfd2e788566fae61a0

Files

188c77f97ef751dfd2e788566fae61a0
.exe windows:4 windows x86 arch:x86

5128288ddeabb0cbaa6566017295f151

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindNextUrlCacheEntryExW
FtpGetFileA
InternetTimeToSystemTimeW
GopherOpenFileW
InternetCombineUrlA

user32

TileChildWindows
EndDeferWindowPos
IsCharUpperW
CharNextExA
GetUserObjectInformationW
DdeUninitialize
ChangeDisplaySettingsExA
GetPropW
EqualRect
GetWindowTextLengthA
DispatchMessageA
GetKeyboardLayout
DestroyWindow
ShowWindow
GetKBCodePage
ScrollWindow
GetUpdateRgn
SetWindowsHookExW
IsDlgButtonChecked
ValidateRect
GetThreadDesktop
SetDebugErrorLevel
InvertRect
DestroyIcon
GetClipboardData
GetMenuItemInfoA
ClientToScreen
DefWindowProcA
KillTimer
CheckRadioButton
AdjustWindowRect
IsIconic
RegisterClassExA
MessageBoxW
CloseWindow
RegisterClassA
WaitMessage
TranslateAcceleratorA
EndPaint
DdeCreateStringHandleA
OpenIcon
IsWindowEnabled
GetCaretBlinkTime
CreateWindowExW
GetMenuDefaultItem
DrawFocusRect
ChangeDisplaySettingsA
MapVirtualKeyA

shell32

DragQueryFileAorW
SHFormatDrive
SHFileOperationW
SHUpdateRecycleBinIcon
RealShellExecuteW

advapi32

CryptSetProvParam
CryptVerifySignatureW
CryptReleaseContext
RegOpenKeyExA
DuplicateTokenEx
RegReplaceKeyW
CryptDestroyHash
InitializeSecurityDescriptor
GetUserNameA
CryptEncrypt
RevertToSelf
GetUserNameW
RegQueryValueA
CryptVerifySignatureA
CryptCreateHash
AbortSystemShutdownW
LookupSecurityDescriptorPartsA
LookupAccountNameA
CryptSignHashA
CryptAcquireContextW
CryptDeriveKey
RegRestoreKeyA

comctl32

InitCommonControlsEx
CreatePropertySheetPageA
CreateStatusWindowA
ImageList_EndDrag

gdi32

ExtFloodFill
SetWorldTransform
FloodFill
SetTextAlign
GetOutlineTextMetricsA
EndPath
CreateDIBSection
GetWindowExtEx
GetTextCharsetInfo
CloseEnhMetaFile
UpdateColors
GetWinMetaFileBits
GetEnhMetaFileDescriptionW
AngleArc
GetTextMetricsA
CreateDiscardableBitmap
PlayMetaFileRecord
CreateRectRgn
GetTextExtentPointA
EnumObjects

kernel32

VirtualUnlock
WriteConsoleW
GetStringTypeExW
GetModuleFileNameA
LoadLibraryA
GetStdHandle
GetProcAddress
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetCurrentProcessId
GetLogicalDrives
SetConsoleCtrlHandler
SetConsoleWindowInfo
VirtualQuery
GetSystemTimeAsFileTime
GetLocalTime
GetStartupInfoA
MultiByteToWideChar
OutputDebugStringA
WideCharToMultiByte
InterlockedDecrement
HeapValidate
LCMapStringW
GetStringTypeW
GetStringTypeA
WritePrivateProfileStringA
LCMapStringA
EnumResourceLanguagesW
UnhandledExceptionFilter
SetConsoleActiveScreenBuffer
InterlockedIncrement
DeleteCriticalSection
GetCommandLineA
VirtualFree
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
GetProfileSectionA
GetSystemTime
TlsSetValue
GlobalFlags
GetConsoleCP
TlsFree
CloseHandle
ExitProcess
FillConsoleOutputCharacterW
GetFileAttributesW
GlobalLock
GetTickCount
Sleep
GetOEMCP
GetTimeFormatW
lstrcpyA
HeapReAlloc
FindNextFileW
GetModuleHandleA
SuspendThread
SetLastError
IsBadWritePtr
SetConsoleTitleW
VirtualAlloc
DebugBreak
InterlockedExchange
GetVersion
HeapCreate
RtlFillMemory
FoldStringA
GlobalAlloc
WriteFile
LoadLibraryW
GetAtomNameA
SetHandleCount
CompareStringW
GetCurrentThreadId
GetNumberFormatA
FlushFileBuffers
GetCurrentProcess
GetTempPathA
ReadFile
CreateMutexA
GetEnvironmentStrings
EnumDateFormatsExW
GetTempFileNameW
GetLastError
HeapDestroy
InitializeCriticalSection
TlsAlloc
GetTimeZoneInformation
GetLocaleInfoA
TerminateProcess
GetSystemTimeAdjustment
GetCurrentThread
GetProcessAffinityMask
VirtualAllocEx
EnumResourceNamesW
QueryPerformanceCounter
FreeEnvironmentStringsA
HeapAlloc
SetStdHandle
CompareStringA
SetFilePointer
HeapFree
GetCPInfo
GetEnvironmentStringsW
OpenMutexA
GetFileType
GetACP
InterlockedCompareExchange
IsBadReadPtr
TlsGetValue

Sections

.text
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5128288ddeabb0cbaa6566017295f151

Headers

File Characteristics

Imports

wininet

user32

shell32

advapi32

comctl32

gdi32

kernel32

Sections

.text Size: 180KB - Virtual size: 176KB

.rdata Size: 132KB - Virtual size: 130KB

.data Size: 104KB - Virtual size: 105KB

.rsrc Size: 44KB - Virtual size: 40KB

.text
Size: 180KB - Virtual size: 176KB

.rdata
Size: 132KB - Virtual size: 130KB

.data
Size: 104KB - Virtual size: 105KB

.rsrc
Size: 44KB - Virtual size: 40KB