1a3fc4efbf4215993add6845e7ca7645

Sharing

Copy URL Twitter E-mail

General

Target

1a3fc4efbf4215993add6845e7ca7645
Size

25KB
MD5

1a3fc4efbf4215993add6845e7ca7645
SHA1

be5236d478ad50d0adc1f9d1de35f51fe15300bd
SHA256

f1d6c49afaf438aae11a1337cc6060eb78961797e0f44a9147638d767d91e19c
SHA512

22e35b042dd6e84d2702de009068d7ab44564d3f92bbd0af0234a117a39e1df17340977821e120b81a7ed8a5c7a45b174c5b07f40fc859a35490f8bce8013216
SSDEEP

384:1wUJlFUtTYp+/9AX8ZCrohZ/hiJn473lZ6ADtbBAvKIddDTE+4CQDnU9HRr/:1wKlFUuWnCrohJkJnI760ZBmfmjed/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a3fc4efbf4215993add6845e7ca7645

Files

1a3fc4efbf4215993add6845e7ca7645
.exe windows:4 windows x86 arch:x86

d36093bd55cd69fadbdf8c2a53a00a15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadHugeWritePtr
WriteFileGather
HeapQueryInformation
SetEndOfFile
GetUserDefaultLCID
OpenJobObjectA
GlobalSize
UpdateResourceA
GetCurrentDirectoryA
WritePrivateProfileSectionA
IsSystemResumeAutomatic
ReadConsoleInputA
CallNamedPipeA
GetLogicalDriveStringsA
GetThreadPriority
HeapSize
SetFileAttributesA
GetComputerNameA
GetConsoleTitleA
GetSystemWindowsDirectoryA
WriteConsoleOutputAttribute
GetConsoleTitleA
HeapWalk
FreeConsole
MulDiv
GetFileAttributesExA
GetCalendarInfoA
CommConfigDialogA
SetConsoleCursorMode
CancelWaitableTimer
WideCharToMultiByte
QueryInformationJobObject
GetConsoleScreenBufferInfo
GetPriorityClass
GetPriorityClass
GetConsoleFontInfo
WaitForSingleObjectEx
WriteConsoleOutputCharacterW
GlobalFindAtomA
SetCurrentDirectoryA
WaitNamedPipeA
VirtualProtect
SystemTimeToTzSpecificLocalTime
GetFileAttributesA
GlobalGetAtomNameA
GetEnvironmentVariableA
GetConsoleMode
GetCurrentProcess
CopyFileExW
ProcessIdToSessionId
GetVDMCurrentDirectories
VirtualUnlock
FindFirstFileExA
AddAtomA
GetFileSizeEx
SetFileApisToANSI
GetConsoleAliasesLengthA
_hwrite
LockFileEx
GetBinaryType
PostQueuedCompletionStatus
GetModuleHandleA
LCMapStringA
GetProcessHeaps
lstrlenA
GetExitCodeThread
GetModuleFileNameA
GetThreadPriorityBoost
HeapValidate
GetExitCodeThread
PeekConsoleInputA
GetProfileIntA
lstrcmpiA
GetFullPathNameA
GetCommTimeouts
GetThreadSelectorEntry
BuildCommDCBAndTimeoutsW
ResumeThread
WriteConsoleOutputCharacterA
GetFileSizeEx
DeleteTimerQueueEx
GetCurrentProcessId
FindAtomA
GetDriveTypeA
lstrcmpi
VirtualAlloc
HeapSize
IsProcessorFeaturePresent
GetVolumeNameForVolumeMountPointA
GetConsoleOutputCP
HeapFree
EndUpdateResourceA
GetCommandLineA
GetWindowsDirectoryA
WriteProfileSectionA
CreateWaitableTimerA
GetProcessPriorityBoost
SetComputerNameExW
SetInformationJobObject
GetConsoleCommandHistoryLengthA
VirtualAllocEx
FreeLibrary
GetProcessShutdownParameters
GetConsoleCP
ReleaseSemaphore
lstrcpy
FlushViewOfFile
FindNextVolumeMountPointA
GetThreadSelectorEntry
GlobalHandle
OpenProfileUserMapping
ResetEvent
DeleteTimerQueue
GetConsoleAliasExesA
GetFileType
GetConsoleInputExeNameA
HeapDestroy
EnumResourceTypesA
GetModuleHandleA
DeleteTimerQueue
UpdateResourceA
SetConsoleCursorInfo
GetVersionExA
Toolhelp32ReadProcessMemory
IsBadStringPtrA
ReadConsoleInputA
ClearCommError
ReadFileScatter
GetSystemTime
CloseHandle
GetExitCodeProcess
GetProcessWorkingSetSize
VirtualAlloc
SetEndOfFile
Module32Next
CreateEventA
LZDone
GetSystemTimes
UnmapViewOfFile
IsBadCodePtr
ReadConsoleOutputAttribute
GetLogicalDrives
WriteConsoleA
lstrcatA
VirtualFree
DisconnectNamedPipe
GetFileInformationByHandle
WriteConsoleInputA
GetFullPathNameA
GetFileSize
IsValidCodePage
FormatMessageA
GetModuleHandleA
GetDllDirectoryA
OpenJobObjectA
GetNamedPipeInfo
GetConsoleInputExeNameA
WaitForMultipleObjects
GetEnvironmentStringsA
WriteConsoleOutputA
GetNumberOfConsoleMouseButtons
ReadConsoleOutputCharacterA
EnumResourceNamesA
GetEnvironmentStringsA
GetCommTimeouts
GetConsoleAliasExesW
GetDiskFreeSpaceExA
ReadFileEx
GetFileType
GetSystemDirectoryA
FindResourceA
UpdateResourceA
GetConsoleWindow
GetWriteWatch
GetDateFormatA
GetPriorityClass
GetConsoleCursorMode
PeekNamedPipe
PulseEvent
SetConsoleMenuClose
GetConsoleAliasExesLengthA
GetCommState
GetDiskFreeSpaceA
GetProcessHeap
DeleteTimerQueueTimer
CopyFileExA
OpenFileMappingA
OutputDebugStringA
GlobalUnfix
FindNextFileA
GetPrivateProfileSectionA
_lopen
CompareFileTime
SetEnvironmentVariableA
SetComputerNameA
OpenSemaphoreA
GetVolumeInformationA
WriteProcessMemory
MapViewOfFileEx
GetComputerNameA
GetConsoleTitleA
GetSystemWindowsDirectoryA
GetDevicePowerState
FindVolumeClose
GetLocaleInfoA
LZClose
WaitForMultipleObjectsEx

dsound

DllGetClassObject

tapi32

phoneSetStatusMessages

user32

ReuseDDElParam
GetCursorFrameInfo
SetActiveWindow
SendMessageTimeoutA
SetScrollRange
RegisterHotKey
GetThreadDesktop
SystemParametersInfoA
DrawIconEx
DefDlgProcA
GetClipCursor
SetProgmanWindow
DisplayExitWindowsWarnings
PrintWindow
PaintMenuBar
GetWindowLongA
RedrawWindow
GetDlgItemTextA
SetRect
CreateAcceleratorTableA
CloseWindowStation
CharLowerBuffA
DestroyMenu
BroadcastSystemMessageExA
EndDeferWindowPos
DrawStateA
GetOpenClipboardWindow
EnumDesktopsA
ScreenToClient
GetClipboardData
DeferWindowPos
DlgDirListA
SetMenuInfo
GetKeyboardLayoutNameA
CascadeChildWindows
UnregisterDeviceNotification
GetRawInputData
CharNextA
SendInput
GetGUIThreadInfo
UnlockWindowStation
SetMenuContextHelpId
LoadMenuIndirectW
GetUserObjectInformationA
ChangeDisplaySettingsExA
IsWindowUnicode
PrivateExtractIconsA
CopyAcceleratorTableA
GetRawInputDeviceInfoA
GetCapture
TabbedTextOutA
InsertMenuItemA
GetThreadDesktop
GetAltTabInfoA
GetMenuDefaultItem
GetClassInfoExW
GetNextDlgGroupItem
ClientThreadSetup
ShowWindowAsync
SetShellWindow
EnumDisplaySettingsA
DrawAnimatedRects
GrayStringA
IsCharAlphaNumericA
GetProcessDefaultLayout
DlgDirListComboBoxA
GetReasonTitleFromReasonCode
SetSystemMenu
SetCursorPos
SetScrollInfo
GetLayeredWindowAttributes
FindWindowExA
MoveWindow
MonitorFromPoint
GetCursorFrameInfo
PackDDElParam
MessageBoxExA
CreateIconFromResourceEx
GetDlgItemInt
ToUnicode
IsCharAlphaNumericA
MapVirtualKeyExA
ChangeDisplaySettingsExA
IsCharLowerA
ReplyMessage
SetSysColors
CloseWindowStation
ToUnicode
EndMenu
CharPrevA
LockWindowStation
SetWindowPlacement
CopyAcceleratorTableA
GetKeyboardLayoutNameA
SetShellWindow
FindWindowExA
DefDlgProcA
RegisterDeviceNotificationA
TranslateAccelerator
GetDlgItemTextA
IsCharAlphaNumericA
SetTaskmanWindow
SetProcessWindowStation
MenuItemFromPoint
DrawMenuBar
GetWinStationInfo
SystemParametersInfoA
PrivateExtractIconsA
UnregisterMessagePumpHook
SetCaretPos
GetWindowLongA
ToAsciiEx
FlashWindow
DestroyCursor
CheckRadioButton
GetMenuStringA
PrivateExtractIconExA
AdjustWindowRectEx
RemovePropA
SetSystemCursor
PostQuitMessage
RemovePropA
CreateDialogParamA
GetMenuStringA
TrackMouseEvent
AnimateWindow
ClientThreadSetup
GetKeyboardLayout
EndMenu
DrawStateA
GetKeyboardLayout
EditWndProc
MessageBoxA
GetWindowTextA
SwitchToThisWindow
GetScrollBarInfo
EnumThreadWindows
SendMessageTimeoutA
GrayStringA
PtInRect
ReleaseDC
LoadKeyboardLayoutEx
OpenDesktopA
ImpersonateDdeClientWindow
PrintWindow
MonitorFromPoint
MessageBoxTimeoutA
PostThreadMessageA
DialogBoxIndirectParamA
SwitchDesktop
RegisterHotKey
ChangeDisplaySettingsExA
DestroyCursor
LoadKeyboardLayoutEx
CountClipboardFormats
TranslateMDISysAccel
GetMenuInfo
CharPrevExA
PrintWindow
LoadImageA
LoadIconA
SetMenuContextHelpId
CharLowerBuffA
MapVirtualKeyA
PeekMessageA
ReplyMessage
SetForegroundWindow
ArrangeIconicWindows
ChangeDisplaySettingsExA
IsDialogMessageA
CreateDialogIndirectParamA
GetSysColor
MapVirtualKeyExW
IsCharUpperA
IsClipboardFormatAvailable
UnhookWindowsHookEx
IsCharAlphaNumericW
GetUpdateRect
GetClassWord
DefMDIChildProcA
EnumDisplayMonitors
ShowWindowAsync
FreeDDElParam
SendMessageCallbackA
MonitorFromPoint
GetClipboardViewer
DefMDIChildProcA
GetClassInfoA
GetNextDlgTabItem
RegisterUserApiHook
AlignRects
RegisterSystemThread
DrawStateA
SetWindowLongA
SetPropA
SetScrollInfo
PaintDesktop
UnpackDDElParam
AllowForegroundActivation
RegisterSystemThread
OemToCharBuffW

authz

AuthzGetInformationFromContext

gdi32

DescribePixelFormat
GetObjectType

Exports

Exports

OpenNiluxdaq
CreateUobnbhoggn
Smgweawjaa
WriteEjhhugq
GetGwlnxioy
Eemiujpnq
Ydionms
Tunthykh
WriteRjxelbfpt
CloseJsorovmicji
Kspurto
EndNlileuklq
SetGfnhnccq
Xvgjnfpthko
OpenAgjecgerf
Gvcqnmwy
Hvcmpmbwm

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d36093bd55cd69fadbdf8c2a53a00a15

Headers

File Characteristics

Imports

kernel32

dsound

tapi32

user32

authz

gdi32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 436B

.idata Size: 10KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 972B

.reloc Size: - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 436B

.idata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 972B

.reloc
Size: - Virtual size: 1KB