24b2c1cd4ebd059df56f20992e0983fb

Sharing

Copy URL

Twitter E-mail

General

Target

24b2c1cd4ebd059df56f20992e0983fb
Size

506KB
MD5

24b2c1cd4ebd059df56f20992e0983fb
SHA1

e2a0bcd8f1c410333c875b05ba1c6526826a0948
SHA256

00621e48fb44fe84127fcc9794f478f132d1b9ad96d2e95db0d97efbcde35da2
SHA512

35a51a72d7583b5f26bc5c019ee65e14fa82ab0bd4a02951e475f5020891fe9319fe5b1f6abd277fb22ea824955b4f7c7c2f5be388e78f23c9d296376f3f0634
SSDEEP

6144:GeeA2zUjS4LycYA4KziNLLbTdUIfFVfOK8h9ybK3SG4hsThu2T7l1Lpgv9OWNjci:GxcIRBR7fDhaoM2jcPHAvjk4vvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24b2c1cd4ebd059df56f20992e0983fb

Files

24b2c1cd4ebd059df56f20992e0983fb
.exe windows:4 windows x86 arch:x86

159d77dfedeb20e2e347f3226f75939d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder
ShellExecuteA
SHGetPathFromIDListA

user32

GetMonitorInfoW
SetClassLongA
RegisterClassExA
FrameRect
RegisterClassA
GetComboBoxInfo
DrawTextExW
FindWindowW
wsprintfA
EnableMenuItem

advapi32

CryptContextAddRef
RegDeleteValueA
CryptGetDefaultProviderA
CryptDestroyKey
RegEnumKeyExW
CryptDestroyHash
RegQueryValueExW
CryptEnumProvidersW
CryptSetProviderExW
InitiateSystemShutdownW
LookupAccountSidW
RegSetValueExA
CryptDeriveKey
LookupAccountSidA
RegCreateKeyW
InitializeSecurityDescriptor
LookupAccountNameA
CryptHashSessionKey
RegEnumKeyA
RegOpenKeyW
RegQueryValueW
RegQueryValueExA
CryptReleaseContext

kernel32

GetModuleHandleA
CompareStringW
LocalFree
LCMapStringA
CreateMutexA
HeapSize
GetUserDefaultLangID
LCMapStringW
GetDateFormatA
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThread
HeapReAlloc
GetCurrentProcess
WriteFile
GetEnvironmentStringsA
SetFilePointer
GetStartupInfoA
GetCompressedFileSizeW
GetModuleFileNameA
SetStdHandle
TlsFree
GetProfileStringW
TlsSetValue
GetTickCount
IsBadWritePtr
GetPrivateProfileStructA
MultiByteToWideChar
CompareStringA
HeapDestroy
GetStringTypeA
CloseHandle
GetCommandLineW
GetVersionExA
VirtualAlloc
FillConsoleOutputCharacterA
VirtualProtect
VirtualQuery
GetModuleFileNameW
GetStdHandle
SetEnvironmentVariableW
WideCharToMultiByte
GetUserDefaultLCID
GetFileType
EnumSystemLocalesA
GetTimeFormatA
ReadFile
LocalFileTimeToFileTime
GetCurrentThreadId
SetHandleCount
OpenMutexA
SetVolumeLabelW
GetLocaleInfoW
GetEnvironmentStringsW
DeleteCriticalSection
RtlUnwind
InterlockedExchange
GetCPInfo
HeapFree
VirtualFree
GlobalUnfix
HeapCreate
GetStartupInfoW
GetLocalTime
QueryPerformanceCounter
GetOEMCP
SetEnvironmentVariableA
IsValidLocale
IsValidCodePage
TlsGetValue
EnterCriticalSection
TlsAlloc
SetLocalTime
LeaveCriticalSection
InitializeCriticalSection
VirtualFreeEx
GetLastError
FlushFileBuffers
GetEnvironmentStrings
SetLastError
GetACP
FreeEnvironmentStringsW
GetProcAddress
GetLocaleInfoA
FreeEnvironmentStringsA
LoadLibraryExA
ExitProcess
GetCurrentProcessId
GetSystemInfo
GetLogicalDriveStringsA
UnhandledExceptionFilter
LoadLibraryA
GetPrivateProfileStructW
TerminateProcess
GetTimeZoneInformation
WriteConsoleOutputAttribute
GetStringTypeW
HeapAlloc

comctl32

InitCommonControlsEx

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

159d77dfedeb20e2e347f3226f75939d

Headers

File Characteristics

Imports

shell32

user32

advapi32

kernel32

comctl32

Sections

.text Size: 172KB - Virtual size: 172KB

.rdata Size: 8KB - Virtual size: 31KB

.data Size: 310KB - Virtual size: 310KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 172KB - Virtual size: 172KB

.rdata
Size: 8KB - Virtual size: 31KB

.data
Size: 310KB - Virtual size: 310KB

.rsrc
Size: 14KB - Virtual size: 13KB