38a5fa38a2ddc1466df9492b83cf532c

Sharing

Copy URL

Twitter E-mail

General

Target

38a5fa38a2ddc1466df9492b83cf532c
Size

592KB
MD5

38a5fa38a2ddc1466df9492b83cf532c
SHA1

caaa59f3cfda9d5aa4f2dce005bf2f2aa7e4e4e8
SHA256

304b1d3033dbc2d306ed695756147f45fdcab413d9d6346d76968b5cf3cf5a26
SHA512

cc06b9bbaa34d9e41b50200eefd1409d1d2dcb3353bc75e57d71aa6a1886843d095a1886285578afbcf0aac46be27734d9e5b2a7b2153f545460ed0249b01451
SSDEEP

12288:xfL0AEVkxZltpX9kwAGhC2wTERtkdgTmEDqxQzjEtI/FBDZHL:xTAkZlnq/8GERugTmEDwQfEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38a5fa38a2ddc1466df9492b83cf532c

Files

38a5fa38a2ddc1466df9492b83cf532c
.exe windows:4 windows x86 arch:x86

9f7896ceae7fd60fc08b105142a4b0fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
PageSetupDlgW
GetFileTitleA

kernel32

SetUnhandledExceptionFilter
GetStartupInfoA
TlsGetValue
Sleep
LCMapStringW
VirtualQuery
GetOEMCP
HeapAlloc
RtlUnwind
GetFileAttributesW
GetTickCount
CompareStringW
TlsSetValue
GetStringTypeW
WriteConsoleW
InterlockedDecrement
MultiByteToWideChar
SetFilePointer
GetLocaleInfoA
LoadLibraryA
CloseHandle
GetEnvironmentStringsW
GetStdHandle
GetLastError
SetComputerNameA
HeapCreate
WriteFile
HeapFree
TerminateProcess
GetProcessHeap
GetCPInfo
ReadFile
IsValidCodePage
SetHandleCount
GetFileType
VirtualFree
GetCurrentProcess
InterlockedIncrement
GetConsoleOutputCP
DeleteCriticalSection
GetModuleFileNameA
WriteConsoleA
CreateMutexA
GetLocaleInfoW
SetEnvironmentVariableA
GetConsoleMode
CreateFileA
GetDateFormatA
HeapSize
GetACP
GetVersionExA
GetCurrentThread
TlsFree
HeapDestroy
TlsAlloc
GetUserDefaultLCID
OpenMutexA
GetCurrentProcessId
UnhandledExceptionFilter
HeapReAlloc
LeaveCriticalSection
GetModuleHandleA
ExitProcess
EnumSystemLocalesA
GetTimeZoneInformation
GetCommandLineA
QueryPerformanceCounter
SetLastError
FreeEnvironmentStringsA
IsValidLocale
GetStringTypeA
InitializeCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
CompareStringA
WideCharToMultiByte
IsDebuggerPresent
VirtualAlloc
InterlockedExchange
SetConsoleCtrlHandler
FreeEnvironmentStringsW
SetStdHandle
FlushFileBuffers
LCMapStringA
GetTimeFormatA
GetProcAddress
GetEnvironmentStrings
FreeLibrary
EnterCriticalSection
SetConsoleTitleW
GetConsoleCP

wininet

InternetQueryDataAvailable
InternetTimeToSystemTimeA
SetUrlCacheEntryGroupW
InternetTimeFromSystemTimeW
InternetSetOptionA
FreeUrlCacheSpaceW
HttpEndRequestW
InternetGoOnline
InternetGetConnectedStateExW

shell32

SHBrowseForFolderA
DuplicateIcon
ExtractAssociatedIconExA
SHGetSpecialFolderPathA

comctl32

ImageList_GetIconSize
ImageList_Read
ImageList_SetFlags
ImageList_LoadImageA
ImageList_DrawEx
ImageList_Create
CreateMappedBitmap
InitCommonControlsEx
ImageList_GetBkColor
ImageList_DragLeave
ImageList_Destroy
ImageList_GetDragImage
DestroyPropertySheetPage
ImageList_Add
ImageList_GetImageInfo
ImageList_Draw
ImageList_SetFilter
MakeDragList
ImageList_GetFlags

gdi32

GetCharWidthW
GetColorSpace
GetICMProfileW
ColorCorrectPalette
PlayEnhMetaFile
GetOutlineTextMetricsA
EqualRgn
CreateDIBitmap
CreateEllipticRgn
ExtTextOutA
StartDocA
PolyTextOutW
CloseFigure
AddFontResourceA
GetObjectType
GetNearestPaletteIndex
CreateCompatibleDC
GetTextCharacterExtra
RectVisible
SetColorSpace
GetMiterLimit
CreateBrushIndirect
GetKerningPairs

user32

FindWindowA
ShowScrollBar
WaitForInputIdle
DeleteMenu
SetMessageQueue
GetMenuItemInfoW
CreateWindowExW
DrawAnimatedRects
MonitorFromPoint
ReleaseCapture
SetPropA
DlgDirListComboBoxW
ShowWindow
EnumDisplayMonitors
BeginDeferWindowPos
GetScrollBarInfo
GetWindowTextLengthW
IsCharAlphaA
ScrollWindowEx
UnloadKeyboardLayout
GetInputState
AnyPopup
SetUserObjectSecurity
SetRect
GetWindowTextLengthA
GetNextDlgTabItem
SetDlgItemInt
GetNextDlgGroupItem
GetClipboardSequenceNumber
EnableWindow
CharLowerBuffA
OpenInputDesktop
IsZoomed
GetProcessDefaultLayout
GetTabbedTextExtentA
GetWindowWord
wvsprintfW
SetWindowWord
FlashWindowEx
GetWindowLongW
MessageBoxExA
RegisterClassExA
LoadMenuA
GetWindowInfo
GrayStringA
DestroyCaret
DestroyWindow
DrawStateA
SetSystemCursor
SetFocus
GetClientRect
IntersectRect
CharToOemBuffA
GetCaretPos
SetDlgItemTextW
TileChildWindows
CharUpperA
MessageBoxW
GetClassNameA
SetLastErrorEx
DrawFrameControl
UnionRect
LoadImageA
RegisterClipboardFormatW
CharLowerA
RealChildWindowFromPoint
RegisterClassA
PostQuitMessage
ChangeDisplaySettingsExA
RemovePropA
DdeQueryStringW
CreatePopupMenu
InSendMessage
SetParent
TileWindows
EnumDesktopsW
TrackMouseEvent
CreateCaret
CreateIconFromResourceEx
DefWindowProcA
ValidateRgn
ValidateRect
ToUnicodeEx
DdeUninitialize
GetClassInfoA
ModifyMenuW
EnumDisplayDevicesW
SetScrollRange
GetTopWindow
EndPaint
LoadBitmapW
AdjustWindowRectEx
GetClipCursor
DeferWindowPos
ExcludeUpdateRgn
EnumPropsW
TranslateMessage
LoadMenuIndirectW
ArrangeIconicWindows
DestroyAcceleratorTable
GetClipboardFormatNameA
DdeCreateDataHandle
DdePostAdvise

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f7896ceae7fd60fc08b105142a4b0fe

Headers

File Characteristics

Imports

comdlg32

kernel32

wininet

shell32

comctl32

gdi32

user32

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 268KB - Virtual size: 264KB

.data Size: 112KB - Virtual size: 126KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 268KB - Virtual size: 264KB

.data
Size: 112KB - Virtual size: 126KB

.rsrc
Size: 20KB - Virtual size: 17KB