3faf1ee81383c659c43b60f4d896d789

Sharing

Copy URL Twitter E-mail

General

Target

3faf1ee81383c659c43b60f4d896d789
Size

336KB
MD5

3faf1ee81383c659c43b60f4d896d789
SHA1

8e3ef0a3c1c033d37abe50735b1ee47ecc5be33e
SHA256

595a10100f7231f9abe055f0f79ee984f426b838d5105b9692c30b2c734f7763
SHA512

49197938744abf0768ef6529bbb01fd408a7da7d90cbe7d11b968d88cb22ec4246dacca712842b305eeab7b9a912028f0fb584521c1df5d672d7da7f1f68f3d4
SSDEEP

6144:cvN/1pG7h/3JwlQ2ghSS7mZoofNgUdE7Fdh+WxWMhKUcuJy8/uxtyODGU+:8k93cUieofru7r5WM4nuJy8GxLDGU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3faf1ee81383c659c43b60f4d896d789

Files

3faf1ee81383c659c43b60f4d896d789
.exe windows:4 windows x86 arch:x86

b2400d4d030e975347b83133213b74f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegSetValueW

kernel32

OutputDebugStringW
QueryPerformanceCounter
ResetEvent
SetConsoleScreenBufferSize
SetEvent
SetUnhandledExceptionFilter
Sleep
ExpandEnvironmentStringsW
TerminateThread
LockResource
WaitForMultipleObjects
WaitForSingleObject
WriteFile
WritePrivateProfileStringW
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsBadWritePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetStdHandle
GetStartupInfoW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleHandleA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
FreeConsole
FormatMessageW
UnhandledExceptionFilter
FindResourceW
AllocConsole
CloseHandle
CreateDirectoryW
CreateEventW
CreateFileW
CreateThread
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
TerminateProcess

gdi32

SetTextColor
SetPixel
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
Rectangle
RealizePalette
PtInRegion
PatBlt
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetPixel
GetObjectW
GetMapMode
GetDeviceCaps
GetDIBits
GetDIBColorTable
ExtTextOutW
ExtFloodFill
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreatePolygonRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
StretchBlt

user32

DestroyWindow
DrawFocusRect
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndPaint
EqualRect
FillRect
FindWindowW
GetActiveWindow
GetClassInfoW
GetClientRect
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowRect
InsertMenuW
IntersectRect
InvalidateRect
InvertRect
IsIconic
IsRectEmpty
IsWindow
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
OffsetRect
PostMessageW
PtInRect
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetCursor
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemInfoW
SetRect
SetRectEmpty
SetTimer
SetWindowLongW
SetWindowPos
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
UpdateWindow
ValidateRect
WinHelpW
wvsprintfW
DestroyMenu
DeleteMenu
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CopyRect
ClientToScreen
CheckMenuRadioItem
CheckMenuItem
AppendMenuW
BeginPaint
CallWindowProcW
CharNextW
CharPrevW
BeginDeferWindowPos

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageCount
ImageList_LoadImageW
ImageList_SetOverlayImage
InitCommonControlsEx
CreateToolbarEx

ole32

CoTaskMemFree
CoInitializeEx
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString
SysStringLen
SetErrorInfo
LoadRegTypeLi

Exports

Exports

av_free
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2400d4d030e975347b83133213b74f2

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comctl32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 28KB - Virtual size: 28KB