3c2e8b84fc78619e54153d31e1b0265f

Sharing

Copy URL Twitter E-mail

General

Target

3c2e8b84fc78619e54153d31e1b0265f
Size

320KB
MD5

3c2e8b84fc78619e54153d31e1b0265f
SHA1

6b78b2eb5d5a6abad961eb8cf54e443bc8b9d126
SHA256

3f617f5c90e602c91743401eefac07d03b58352b105333fc2bde0a0fc188ed98
SHA512

29c7904b9716ed92cbc02d0fa6e65263b6d095be9cefc5e2562f47f5114401d7b15bddb6b2be240c65e036e1a1d5fbc47a6dc1e53b5605766fa6a52009670411
SSDEEP

3072:Nv1CIrJrWsIW1BQTZfQ7OU0f1v4lqw7a/gTJ94eBYJBbh/9EkeauiyO0L1r9wthl:h1CUT8T5YTJu1PeafCJkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c2e8b84fc78619e54153d31e1b0265f

Files

3c2e8b84fc78619e54153d31e1b0265f
.dll windows:4 windows x86 arch:x86

c798eb39c57b92cc24c638d35669d520

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
WaitForSingleObject
CreateEventW
GetTempFileNameW
GetWindowsDirectoryW
FindClose
FindFirstFileW
CopyFileW
SetEvent
OpenEventW
CreateProcessW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetTempPathW
SetFilePointer
GetTickCount
GetFileAttributesW
ReadFile
GetCurrentDirectoryW
LocalFileTimeToFileTime
CreateDirectoryW
SetFileTime
CreateFileA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetModuleFileNameW
CreateFileW
WriteFile
CloseHandle
lstrcpynW
CreateThread
SystemTimeToFileTime
GetSystemTime
GetLocaleInfoA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
LoadLibraryA
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId

user32

GetWindow
IsWindowVisible
LoadIconW
GetDesktopWindow
MessageBoxW
SetForegroundWindow
SetFocus
GetWindowTextW
EnumWindows

advapi32

RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW

shell32

SHGetSpecialFolderPathW
Shell_NotifyIconW
ShellExecuteW

ole32

StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx
CoInitialize
CoCreateInstance

shlwapi

SHDeleteKeyW

wininet

InternetConnectW
InternetOpenW
InternetCloseHandle
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetReadFile
HttpQueryInfoW
InternetAttemptConnect

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c798eb39c57b92cc24c638d35669d520

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

shlwapi

wininet

Sections

.text Size: 188KB - Virtual size: 184KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 188KB - Virtual size: 184KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 12KB - Virtual size: 10KB