3b62dbad27aa08dfc74c763ee1cf9cb7

Sharing

Copy URL Twitter E-mail

General

Target

3b62dbad27aa08dfc74c763ee1cf9cb7
Size

153KB
MD5

3b62dbad27aa08dfc74c763ee1cf9cb7
SHA1

8ad226cfd7fcc24b049795f1388edb4a7ed085eb
SHA256

d89b51469d418a6a2d261861d6fa3d50a324ee5f45d95b5a432d1525c864babe
SHA512

0d0a5cbb353fe7795427c581df8f1fe0a47dad836cd5174633c77c20d31e9aac8fb2f86404f7b022d71d3b50a820251f262944aa7843efc8c2c613f48f405862
SSDEEP

3072:tqR9De7ATTsIEOGujhE1ksW5txCUamXO5llab9:tqR9DesHPyoho7W7+Jab9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b62dbad27aa08dfc74c763ee1cf9cb7

Files

3b62dbad27aa08dfc74c763ee1cf9cb7
.exe windows:4 windows x86 arch:x86

37991bb552b9e767290753097253722c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
inet_addr
WSACleanup
inet_ntoa
gethostname
gethostbyname
ntohl
htonl

kernel32

GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
lstrcatA
lstrcmpA
GetCurrentThreadId
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
RtlUnwind
GetStartupInfoA
GetCommandLineA
GlobalReAlloc
HeapFree
RaiseException
SetStdHandle
GetFileType
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
WaitForSingleObject
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
lstrcmpiA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
InterlockedExchange
FlushFileBuffers
SetFilePointer
ReadFile
DuplicateHandle
FindFirstFileA
FindClose
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
lstrcpyA
lstrcpynA
EnterCriticalSection
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
SetFileAttributesA
GetTickCount
CreateMutexA
CreateThread
GetDriveTypeA
DeleteFileA
CopyFileA
ExitProcess
GetTempPathA
CreateFileA
WriteFile
GetModuleFileNameA
ExpandEnvironmentStringsA
CreateProcessA
GetSystemDirectoryA
Sleep
WinExec
CreateToolhelp32Snapshot
Process32First
OpenProcess
TerminateProcess
Process32Next
CloseHandle
GetCurrentProcess
GetLastError
GetLocalTime
SetLocalTime
GetSystemTime
SetSystemTime
SetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
OutputDebugStringA
HeapAlloc

user32

CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
DestroyWindow
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
GetSystemMetrics
CharUpperA
UnhookWindowsHookEx
LoadStringA
SetTimer
GetCursorPos
WindowFromPoint
GetParent
FindWindowA
PostMessageA
GetWindowTextA
DefWindowProcA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetStockObject
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

OpenSCManagerA
QueryServiceStatus
RegisterServiceCtrlHandlerA
CreateServiceA
OpenServiceA
StartServiceA
SetServiceStatus
StartServiceCtrlDispatcherA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
RegCloseKey
RegOpenKeyExA
CloseServiceHandle

comctl32

ord17

urlmon

URLDownloadToFileA

wininet

InternetReadFile
InternetGetLastResponseInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

37991bb552b9e767290753097253722c

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

urlmon

wininet

Sections

.text Size: 109KB - Virtual size: 108KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 19KB - Virtual size: 35KB

.text
Size: 109KB - Virtual size: 108KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 19KB - Virtual size: 35KB