1c5c96a7cd3bbf5a52a14ab82f01aba7

Sharing

Copy URL Twitter E-mail

General

Target

1c5c96a7cd3bbf5a52a14ab82f01aba7
Size

344KB
MD5

1c5c96a7cd3bbf5a52a14ab82f01aba7
SHA1

80f3464dd49983aff4645e6a3d51a5bce698c2bb
SHA256

cccd9db65b921bb17d9c8273ecf3f7e622105d99e943c9cf72ebfb20db06dad2
SHA512

e419c1fdd92bee86f0aca4e3167973746ee814bf14393efc9a93140e713b8701b64c38bc85a871b7698670131c6f97ff070323f0d05b37da85033cf7b804c48b
SSDEEP

3072:MO14g+z3JepQMEE6Q+1rqfvJqxEm4x1ESuQG+3SeyRS6CSfKVu1xgCAWUMs8xEs1:bj+rJes5x1rqfvoxEvTEPp/F9xE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c5c96a7cd3bbf5a52a14ab82f01aba7

Files

1c5c96a7cd3bbf5a52a14ab82f01aba7
.exe windows:6 windows x86 arch:x86

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetCurrentProcess
IsWow64Process
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexW
InterlockedExchange
LocalFree
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CloseHandle
VerSetConditionMask
VerifyVersionInfoW
MulDiv
GetTickCount64
GetLastError
Sleep

gdi32

CreateCompatibleDC
SetBkColor
CreatePen
Polyline
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
CreateFontIndirectW
DeleteObject
GetObjectW
GetDeviceCaps
DeleteDC
BitBlt
GdiAlphaBlend
SelectObject
GetStockObject
GdiSetBatchLimit
SetTextColor
PatBlt
CreateSolidBrush
GetTextMetricsW
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplayDevicesW
GetSysColor
DestroyWindow
CreateWindowExW
CopyImage
LoadBitmapW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
SystemParametersInfoW
SetDlgItemTextW
MapDialogRect
GetClientRect
GetDlgItem
SetFocus
IsCharAlphaNumericW
EnableWindow
ShowWindow
DialogBoxParamW
EndDialog
SetTimer
MessageBoxW
FindWindowW
SetForegroundWindow
LoadCursorW
RegisterClassExW
DrawFocusRect
BeginPaint
GetSysColorBrush
FrameRect
EndPaint
TrackMouseEvent
DefWindowProcW
SendMessageW
InvalidateRect
GetFocus
SetWindowTextW
SetWindowLongW
GetParent
PostMessageW
SendDlgItemMessageW
GetDC
LoadStringW
ReleaseDC
GetProcessDefaultLayout
SendMessageTimeoutW
SetWindowPos
GetWindowRect
PtInRect
GetSystemMetrics
GetWindowLongW
KillTimer

msvcrt

__set_app_type
__p__fmode
memset
_wtoi
_vsnwprintf
_unlock
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__commode
_ismbblead
_XcptFilter
_exit
_purecall
realloc
free
_ftol2
wcschr
_CxxThrowException
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_cexit
__getmainargs
malloc
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_ftol2_sse

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW

uxtheme

IsThemeActive
GetThemeSysColor
OpenThemeData
GetThemeFont
GetThemeColor
GetThemeSysFont
CloseThemeData
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoGetObject

oleaut32

SafeArrayGetElement
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 236KB - Virtual size: 236KB

.reloc Size: 31KB - Virtual size: 32KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 236KB - Virtual size: 236KB

.reloc
Size: 31KB - Virtual size: 32KB