25b22bd28e78317b3ae986ece6d17af5

Sharing

Copy URL Twitter E-mail

General

Target

25b22bd28e78317b3ae986ece6d17af5
Size

632KB
MD5

25b22bd28e78317b3ae986ece6d17af5
SHA1

c05bf86a203191edbd5846dd996d947d167861c1
SHA256

84ce739832f78a94af411c371d74a7a835d429c9be05db55c770760e686caf30
SHA512

3966feec2b9493648049cf8f21e658253d8e56672f941d01fcc8bc0a898341923482ad9e3c4bfc5f38bdcf74e99d3e0e5d17683df29cbde56ff172e81a0ca650
SSDEEP

12288:u483APlAnKfzK1r9xnI33NuCUT4lYDNrzjB+E1eGrldFDGBETL:Vf+1rzI33NuDZXB+EXrldFDb3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b22bd28e78317b3ae986ece6d17af5

Files

25b22bd28e78317b3ae986ece6d17af5
.exe windows:4 windows x86 arch:x86

427db827a2812252b9038aafe64c3ee0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_SetFilter
InitMUILanguage
ImageList_DragMove
ImageList_GetDragImage
ImageList_GetFlags
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_SetDragCursorImage
ImageList_GetBkColor
InitCommonControlsEx

user32

GetTopWindow
OemToCharBuffA
GetDlgItemInt
RegisterClassExW
CallWindowProcW
MessageBoxW
ShowWindow
ExitWindowsEx
EnumPropsExW
SetPropA
ExcludeUpdateRgn
DrawAnimatedRects
CloseWindow
GetFocus
RegisterClassA
EnumWindows
DestroyAcceleratorTable
SetClassLongA
ChangeClipboardChain
IsIconic
DlgDirSelectComboBoxExA
GetWindowContextHelpId
SystemParametersInfoW
GetScrollPos
DrawTextA
LoadImageA
DestroyWindow
DlgDirListW
UnpackDDElParam
RegisterDeviceNotificationW
DefWindowProcW
ToAsciiEx
DeleteMenu
SetWindowLongA
RegisterClassExA
PostThreadMessageA
CloseClipboard
BringWindowToTop
CreateWindowExW
IsCharAlphaW
DdeDisconnect

wininet

InternetInitializeAutoProxyDll
ShowClientAuthCerts

kernel32

GetCurrentThreadId
LCMapStringA
VirtualQuery
GetStartupInfoA
ReadFile
SetStdHandle
SetLastError
GetCurrentProcessId
GetTempPathA
TlsFree
IsBadWritePtr
GetTickCount
GetStartupInfoW
TlsSetValue
GetModuleFileNameA
ExitProcess
HeapCreate
GetCurrentProcess
GetTimeZoneInformation
TlsGetValue
GetSystemTime
GetStringTypeW
SetEnvironmentVariableA
FreeEnvironmentStringsA
InterlockedIncrement
CloseHandle
DeleteCriticalSection
GetStdHandle
OpenMutexA
VirtualFree
GetSystemTimeAsFileTime
HeapFree
LeaveCriticalSection
MultiByteToWideChar
GetProcAddress
GetEnvironmentStrings
VirtualAlloc
EnterCriticalSection
DeleteFiber
GetStringTypeA
TransmitCommChar
GetModuleHandleA
HeapReAlloc
HeapAlloc
FreeEnvironmentStringsW
SetFilePointer
CreateMutexA
GlobalUnfix
LCMapStringW
SetHandleCount
WideCharToMultiByte
GetLocalTime
QueryPerformanceCounter
TlsAlloc
CompareStringW
InterlockedDecrement
GetFileType
IsValidLocale
GetModuleFileNameW
TerminateProcess
LoadLibraryA
SetCurrentDirectoryA
GetCommandLineA
InterlockedExchange
InitializeCriticalSection
GetVersion
GetCPInfo
IsBadReadPtr
GetCurrentThread
FlushFileBuffers
UnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetLastError
CompareStringA
HeapDestroy
GetThreadTimes
GetCommandLineW
RtlUnwind
SleepEx

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

427db827a2812252b9038aafe64c3ee0

Headers

File Characteristics

Imports

comctl32

user32

wininet

kernel32

Sections

.text Size: 216KB - Virtual size: 213KB

.rdata Size: 248KB - Virtual size: 247KB

.data Size: 112KB - Virtual size: 120KB

.rsrc Size: 52KB - Virtual size: 48KB

.text
Size: 216KB - Virtual size: 213KB

.rdata
Size: 248KB - Virtual size: 247KB

.data
Size: 112KB - Virtual size: 120KB

.rsrc
Size: 52KB - Virtual size: 48KB