1b26d7a46d5d63efc066c783b1369bc4

Sharing

Copy URL Twitter E-mail

General

Target

1b26d7a46d5d63efc066c783b1369bc4
Size

296KB
MD5

1b26d7a46d5d63efc066c783b1369bc4
SHA1

f0c0c0a8df8f45bf90c2fda189be2e18ce0c2f6b
SHA256

5ef382f2641f75a2d0ddbd69a2752079d95ea4685c1ffd33aef58cc6b4928d7f
SHA512

c25c72c486b6ddbb4ed42c0127ea8aaca1143a8d336ac9064c80f8a4ceb6161883ea5042246cefb75f73bab638b411e1563e92f9c8ceeae6fe656a869db27d81
SSDEEP

6144:xAKBwXHCrwAtmkke+BkS+6B8gJI3+675EPr:HQfk1NAI33EPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b26d7a46d5d63efc066c783b1369bc4

Files

1b26d7a46d5d63efc066c783b1369bc4
.exe windows:4 windows x86 arch:x86

ac5c370ecd3dc63b84281be40dfe785e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetCurrentDirectoryA
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
GetFileAttributesA
GetFileTime
VirtualAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
ExitProcess
HeapSize
SetStdHandle
GetFileType
TlsFree
VirtualFree
GetStdHandle
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetDriveTypeA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFullPathNameA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
FindFirstFileA
FileTimeToLocalFileTime
FindNextFileA
FindClose
GetCurrentProcessId
WaitForSingleObject
WritePrivateProfileStringA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
GetPrivateProfileStringA
DeleteFileA
CloseHandle
GetVersionExA
GetFileInformationByHandle
GetModuleHandleA
GetTimeZoneInformation
GetProcAddress
CreateFileA
GetVolumeInformationA
GetSystemDirectoryA
Sleep
lstrcpyA
FileTimeToSystemTime
GetPrivateProfileIntA
ReleaseMutex
CreateMutexA
InterlockedExchange
lstrcmpiA
lstrlenA
GetVersion
GetLastError
MultiByteToWideChar
CompareStringA
CompareStringW
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
HeapAlloc
HeapDestroy
HeapFree
HeapCreate

user32

UnregisterClassA
LoadCursorA
GetSysColorBrush
ShowWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
SetCursor
GetDesktopWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
UnhookWindowsHookEx
SetMenuItemBitmaps
DestroyMenu
CallNextHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsIconic
SetTimer
LoadIconA
DrawIcon
GetClientRect
GetSystemMetrics
EnableWindow
SendMessageA
KillTimer
GetClassInfoA
CharUpperA

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

urlmon

URLDownloadToFileA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

gethostbyname
inet_ntoa

wininet

InternetConnectA
HttpSendRequestA
InternetReadFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpOpenRequestA
InternetWriteFile
DeleteUrlCacheEntry
InternetQueryDataAvailable

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac5c370ecd3dc63b84281be40dfe785e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

urlmon

version

ws2_32

wininet

Sections

.text Size: 196KB - Virtual size: 193KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 196KB - Virtual size: 193KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 40KB - Virtual size: 36KB