40ce6253c19573745bd075497da5f39f

Sharing

Copy URL Twitter E-mail

General

Target

40ce6253c19573745bd075497da5f39f
Size

46KB
MD5

40ce6253c19573745bd075497da5f39f
SHA1

6b9b16d4a63f3f638550a1979f595d4371695ac7
SHA256

a595980e0bf77c5be6b9cda333239f28930a95ad1702120cd23e2be994e505c0
SHA512

39c5994305dce655b723790c99f79db32fd58f60be2fa9bb75a62d5e3556c2a278266a8c2debd4d8c7619e41ff5cfa3574c47c5a9d3ca1b27b721323b4fdca23
SSDEEP

768:natA6ioadO60JbEKkh9fdAdoEuxPEaJC+SvxfFxrCB4RZF:nrtoPFEKkhYAx84C+SpdxrCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40ce6253c19573745bd075497da5f39f

Files

40ce6253c19573745bd075497da5f39f
.exe windows:4 windows x86 arch:x86

ae42fc271eaff975fa4357584a2c512a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogW
VirtualProtect
SetConsoleCursor
GetUserDefaultLangID
SetSystemPowerState
FindFirstFileExA
GetNumberOfConsoleInputEvents
lstrcpynA
PrivMoveFileIdentityW
SetThreadPriority
FreeLibraryAndExitThread
GetProcessHeaps
FlushInstructionCache
Module32First
SetTermsrvAppInstallMode
WriteConsoleOutputAttribute
QueryPerformanceCounter
CompareFileTime
GetSystemTimeAsFileTime
VerifyConsoleIoHandle
GetPrivateProfileStringA
GetTimeZoneInformation
GetLogicalDrives
MapViewOfFile
DnsHostnameToComputerNameW
lstrlenW
_lclose
UnlockFileEx
SearchPathW
ChangeTimerQueueTimer
GetExitCodeProcess
LocalUnlock
ReleaseMutex
GetVolumeNameForVolumeMountPointW
GetProcessIoCounters
GetSystemPowerStatus
CreateHardLinkW
GetNumberFormatA
ConsoleMenuControl
SetVolumeLabelW
GetConsoleInputWaitHandle
CreateTapePartition
EnumResourceTypesW
GetLastError
GetShortPathNameA
QueryInformationJobObject
MoveFileWithProgressA
WriteProfileSectionW
GlobalUnfix

user32

GetLastInputInfo
RegisterClassW
ScrollWindow
RegisterSystemThread
GetMenuContextHelpId
DlgDirSelectComboBoxExA
GetMenuItemRect
GetAppCompatFlags2
GetSysColorBrush
ExcludeUpdateRgn
SetDlgItemInt
MapVirtualKeyA
BroadcastSystemMessageW
CharLowerA
DeviceEventWorker
SetSysColors
LoadKeyboardLayoutA
CreateDialogIndirectParamA
DdeDisconnectList
GetClassWord
DdeUninitialize
GetWindowRect
DrawTextA
SetWindowsHookA
OpenClipboard
GetAppCompatFlags
DrawIconEx
GetWindowPlacement
GetClassInfoExW
SendMessageTimeoutA
ArrangeIconicWindows
IsChild
ClipCursor
FlashWindowEx
RemovePropW
IsDialogMessageA
CreateDialogIndirectParamW

gdi32

SetBitmapBits
CloseMetaFile
GdiSetLastError
SetBkMode
SetDIBitsToDevice
Polyline
RestoreDC
GdiGetSpoolFileHandle
GdiConvertFont
GdiEntry8
DrawEscape
RectInRegion
ScaleWindowExtEx
GetPath
DPtoLP
SelectPalette
SetWorldTransform
OffsetWindowOrgEx
GdiInitSpool
PolyPatBlt
TranslateCharsetInfo
RemoveFontResourceExW
GdiProcessSetup
SetMapperFlags
OffsetClipRgn
GdiConvertBrush
CreatePalette
SetICMProfileA
GdiPlayPrivatePageEMF
GetCharWidthFloatA
GetAspectRatioFilterEx
GdiEntry5
AbortPath
CancelDC
GetGlyphOutlineA
GetFontLanguageInfo
SetDCPenColor
SetMiterLimit
GdiDescribePixelFormat
SetLayoutWidth
StretchDIBits
PlayMetaFile
CreateICW
GetPolyFillMode
FONTOBJ_pvTrueTypeFontFile
ResetDCA
GetLogColorSpaceW
FillPath
GetCharacterPlacementW

comdlg32

GetFileTitleA
WantArrows
PageSetupDlgW
ReplaceTextW
LoadAlterBitmap
GetOpenFileNameA
ChooseColorW
PrintDlgExA
FindTextA
ChooseFontW
PrintDlgW

psapi

GetModuleFileNameExA
GetDeviceDriverBaseNameW
GetModuleFileNameExW
EnumProcessModules
EmptyWorkingSet
GetProcessMemoryInfo
GetDeviceDriverFileNameW
GetDeviceDriverFileNameA
GetMappedFileNameA
GetModuleBaseNameA
GetMappedFileNameW
QueryWorkingSet
GetWsChanges
EnumProcesses
GetModuleBaseNameW
EnumDeviceDrivers
InitializeProcessForWsWatch

comctl32

ImageList_SetIconSize
ImageList_DragLeave
PropertySheetA
ImageList_GetImageInfo
ImageList_Add
ImageList_GetIconSize
ImageList_SetFilter
DrawStatusTextA
ImageList_DrawEx
ImageList_GetFlags
FlatSB_GetScrollRange
GetEffectiveClientRect
ImageList_SetBkColor
CreatePropertySheetPage
FlatSB_EnableScrollBar
ImageList_GetBkColor
_TrackMouseEvent
DllGetVersion
ImageList_Copy
FlatSB_SetScrollPos
DrawInsert
ImageList_AddMasked
ImageList_Destroy
InitCommonControls
ImageList_Read
CreatePropertySheetPageW
ImageList_Replace
ImageList_Duplicate

Sections

.text
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ae42fc271eaff975fa4357584a2c512a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

psapi

comctl32

Sections

.text Size: 4KB - Virtual size: 44KB

.data Size: 34KB - Virtual size: 36KB

.idata Size: 6KB - Virtual size: 8KB

.text
Size: 4KB - Virtual size: 44KB

.data
Size: 34KB - Virtual size: 36KB

.idata
Size: 6KB - Virtual size: 8KB