3701b4a7b6cad7cae3050a7aac24719d

Sharing

Copy URL Twitter E-mail

General

Target

3701b4a7b6cad7cae3050a7aac24719d
Size

825KB
MD5

3701b4a7b6cad7cae3050a7aac24719d
SHA1

c2f234e42fe798cff71f00da08c53002db632b19
SHA256

7f860419069a9f1fda70b98ce424bb7c1442b50c58bed89b6ac00c8e15c33566
SHA512

88f33c9b845c7209cc46d0fe6c993c69ac056879526e50103ec5e13abe198bcfb0226c73d3c9bb4ca30f5f8b0b6ee09e66f87f22b19f37a8ba7b8851a59a2474
SSDEEP

24576:KPdZmujlBKSex4hAOyGrt3zhTYOOc7eW6GD:YFKSNU43zhM0e3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3701b4a7b6cad7cae3050a7aac24719d

Files

3701b4a7b6cad7cae3050a7aac24719d
.exe windows:5 windows x86 arch:x86

3dbfc0bac189d1ee8c28db488b33a7d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
_strnicoll
_EH_prolog
_gmtime64
exit
_tolower
__getmainargs
sqrt
__set_app_type
_wchdir
_mbspbrk
__CxxFrameHandler

ntdll

atan
LdrGetDllHandle
NtCompareTokens
RtlIpv4StringToAddressW
memset
RtlCustomCPToUnicodeN
CsrClientConnectToServer
RtlCheckForOrphanedCriticalSections
NtExtendSection
vDbgPrintEx
_CIcos
RtlAssert
ZwStopProfile
NtPulseEvent
ZwSetInformationJobObject
wcsncmp
NtSuspendThread
NtAddBootEntry
ZwCancelTimer
NtReleaseMutant
RtlAddAtomToAtomTable
RtlFindMostSignificantBit
ZwCreateWaitablePort
ZwDeleteAtom

mapistub

MAPIAllocateBuffer@8
BMAPIGetAddress
MAPILogoff
cmc_look_up
HrComposeEID@28
MAPIOpenLocalFormContainer
__ValidateParameters@8
GetTnefStreamCodepage
ScCountProps@12
MAPILogon
FBadRow@4
HrSetOneProp@8
EncodeID@12
SwapPlong@8
WrapProgress@20
cmc_logoff
MAPISendDocuments
LAUNCHWIZARD
MAPIResolveName
MAPIOpenLocalFormContainer@4
CreateIProp@24
UNKOBJ_ScAllocateMore@16
MAPIAddress
HrSetOmiProvidersFlagsInvalid
DllGetClassObject
UNKOBJ_FreeRows@8
OpenIMsgSession@12

kernel32

GetProcessIoCounters
GetCurrentThread
LoadLibraryW
SetConsoleTextAttribute
_lcreat
HeapAlloc
FindNextFileW
CreateMemoryResourceNotification
WriteProfileSectionA
CancelIo
GetLocaleInfoW
FormatMessageW
AddLocalAlternateComputerNameW
InterlockedIncrement
FreeUserPhysicalPages
GetPriorityClass
GetModuleHandleW
WaitForMultipleObjects

opengl32

glFrontFace
glVertex4i
glNewList
wglSetPixelFormat
glNormal3s
glGetPixelMapuiv
glMatrixMode
glTexCoord3iv
wglSetLayerPaletteEntries
glVertex3dv
glShadeModel
glEvalCoord1d
glClearAccum
glNormal3i
glColor4ub

imm32

ImmInstallIMEA
ImmGetConversionListW
ImmGetIMCCLockCount
ImmRequestMessageW
ImmIMPSetIMEA
ImmFreeLayout
ImmGenerateMessage
ImmGetIMEFileNameA
ImmGetImeInfoEx
ImmUnlockImeDpi
ImmGetIMCLockCount
ImmGetHotKey
ImmCallImeConsoleIME
ImmRequestMessageA
ImmReleaseContext
ImmIMPQueryIMEW

sqlunirl

_DrawText@20
_EnumResourceLanguages_@20
_GetPrivateProfileStruct_@20
_RegisterServiceCtrlHandler_@8
_CreateWindowStation_@16
_ExtractIcon_@12
_GetVersionEx@4
_SetUserObjectInformation_@16
_GetWindowText@12
_FatalAppExit_@8
_NDdeGetTrustedShare_@20
_GetProfileString_@20
_RegCreateKeyEx_@36

user32

PostQuitMessage
DefWindowProcA
RegisterClassA

Sections

.text
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3dbfc0bac189d1ee8c28db488b33a7d1

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

mapistub

kernel32

opengl32

imm32

sqlunirl

user32

Sections

.text Size: 363KB - Virtual size: 363KB

.rdata Size: 146KB - Virtual size: 145KB

.data Size: 173KB - Virtual size: 1.6MB

.rsrc Size: 140KB - Virtual size: 140KB

.reloc Size: 1024B - Virtual size: 856B

.text
Size: 363KB - Virtual size: 363KB

.rdata
Size: 146KB - Virtual size: 145KB

.data
Size: 173KB - Virtual size: 1.6MB

.rsrc
Size: 140KB - Virtual size: 140KB

.reloc
Size: 1024B - Virtual size: 856B