422fa918af960b53db1b606076f8aed2

Sharing

Copy URL Twitter E-mail

General

Target

422fa918af960b53db1b606076f8aed2
Size

450KB
MD5

422fa918af960b53db1b606076f8aed2
SHA1

b7beb3edc994889c526e9470dceb3098823fb83a
SHA256

f1d1bdaa9c87b601805244bfa95f29d2a6e573c2870d5a812f9ec4aeef4ed2a7
SHA512

d6b667cc5ed6f52dd8e893a63240eb20df1bd364e0a50585ede39ec34352a453768a0d9bf93a5d0ae180ff1b66b1a7725eccd5128cb018aa9994b777712f0f1e
SSDEEP

12288:i5lIiszKrP7ptcGZmQdXilB9MinUxGd7ogkaU:4l7PttcmmQ8D9MOTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422fa918af960b53db1b606076f8aed2

Files

422fa918af960b53db1b606076f8aed2
.exe windows:4 windows x86 arch:x86

0b34565c27e6d8b04446b1a4d298cdb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatA
EnumSystemLocalesA
MultiByteToWideChar
CompareStringW
RtlUnwind
GetUserDefaultLCID
CompareStringA
GetCurrentProcess
GetStdHandle
VirtualAlloc
SetHandleCount
LCMapStringW
HeapReAlloc
GetLocaleInfoW
HeapCreate
GetLocaleInfoA
GetCPInfo
SetEnvironmentVariableA
GetModuleFileNameA
GetCurrentThread
GetTimeZoneInformation
ExitProcess
GetEnvironmentStringsW
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
GetACP
IsDebuggerPresent
QueryPerformanceCounter
WideCharToMultiByte
TlsAlloc
EnumResourceNamesW
Sleep
UnhandledExceptionFilter
FreeLibrary
HeapAlloc
GetOEMCP
HeapFree
GetProcAddress
SetLastError
GetCurrentProcessId
GetComputerNameA
HeapDestroy
GetStringTypeW
TlsGetValue
InterlockedIncrement
FreeEnvironmentStringsW
GetFileType
HeapSize
GetCommandLineA
LCMapStringA
TlsFree
ResumeThread
DeleteCriticalSection
GetModuleHandleA
GetPrivateProfileSectionA
GetEnvironmentStrings
GetThreadLocale
UnlockFile
SetUnhandledExceptionFilter
GetPriorityClass
TryEnterCriticalSection
FreeEnvironmentStringsA
InterlockedDecrement
GetProcAddress
GetLastError
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
IsValidCodePage
WriteFile
GetStartupInfoA
VirtualQuery
VirtualFree
TlsSetValue
lstrcpyA
SetConsoleCtrlHandler
GetCurrentThreadId
IsValidLocale
OpenProcess
TerminateProcess

gdi32

SetColorAdjustment
PlayMetaFileRecord
GetCharABCWidthsA
MoveToEx
GetLogColorSpaceA
GetBoundsRect
GetTextExtentPoint32A
CreateMetaFileW
GetCharWidthFloatW
GetBitmapDimensionEx
EnumFontFamiliesExW
UpdateICMRegKeyW
GetICMProfileA
GetCharacterPlacementW
CreateSolidBrush
CreateColorSpaceA
StretchBlt
CopyMetaFileW
DeleteMetaFile
CreateHalftonePalette
SetArcDirection

wininet

GopherCreateLocatorA
InternetConnectW
InternetLockRequestFile
SetUrlCacheGroupAttributeA
FtpRenameFileA
FreeUrlCacheSpaceW
FindNextUrlCacheContainerW
HttpEndRequestW
InternetGetConnectedStateExA
InternetReadFileExA
FtpGetFileEx
FtpPutFileW
InternetSetOptionA
InternetCombineUrlA
InternetTimeFromSystemTimeW
InternetErrorDlg
UnlockUrlCacheEntryFileA
InternetSetFilePointer
InternetAlgIdToStringA

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 277KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b34565c27e6d8b04446b1a4d298cdb0

Headers

File Characteristics

Imports

kernel32

gdi32

wininet

Sections

.text Size: 168KB - Virtual size: 168KB

.data Size: 277KB - Virtual size: 308KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 168KB - Virtual size: 168KB

.data
Size: 277KB - Virtual size: 308KB

.rsrc
Size: 4KB - Virtual size: 3KB