4182220ff4da760d4b75077afbe14f1b

Sharing

Copy URL Twitter E-mail

General

Target

4182220ff4da760d4b75077afbe14f1b
Size

600KB
MD5

4182220ff4da760d4b75077afbe14f1b
SHA1

4174ee37b99daa31348e01224e9d3a46f5c1c8dc
SHA256

614e02b5239a94c1b8cbf0245c1d308b81c13f01be6f5679fcc07c7fa096ec5f
SHA512

6213cd7c7d39a8d6489cd23459f2835f31e36760ecf9e9b4c0bfa6311841e17533bfc239ba667ac28d757d67f11709ec61cde4d73578c2c3e87c80fc154d4ebe
SSDEEP

12288:UF08vpHo2mYM5vBpjUc5sFRlDaurhbyQcsH9B8n8:Uy8e2TMZXjEnDaYby3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4182220ff4da760d4b75077afbe14f1b

Files

4182220ff4da760d4b75077afbe14f1b
.exe windows:4 windows x86 arch:x86

0c8167acc59978f83dab29ae89cfeb8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_Remove

user32

EnumThreadWindows
DrawEdge
DdeAbandonTransaction
RegisterClassExA
SetDoubleClickTime
CharPrevExA
DlgDirListW
CreateMenu
DefWindowProcA
OpenInputDesktop
GetDialogBaseUnits
WaitMessage
UnregisterClassA
OpenDesktopW
MessageBoxA
SetCaretPos
EnumDisplaySettingsExW
MapDialogRect
CharLowerBuffA
MonitorFromWindow
DdeQueryStringW
ShowWindow
SendMessageA
LoadIconW
EnumPropsW
GetTopWindow
CreateCursor
GetScrollPos
OemToCharW
RegisterClassA
DestroyWindow
SetClassLongW
SendMessageW
CreateDialogIndirectParamW
MapVirtualKeyExA
CountClipboardFormats
WindowFromPoint
GetKeyboardState
SetWindowsHookExA
FlashWindowEx
GetTabbedTextExtentA
GetCaretBlinkTime
SetDlgItemTextA
CreateWindowExW
ScreenToClient
DdeAddData
GetMenuInfo
GetWindowLongA
MoveWindow
CharLowerW
DlgDirSelectExA
GetNextDlgGroupItem
SetUserObjectInformationA
CharNextA
UnloadKeyboardLayout

gdi32

SetViewportExtEx
GetRandomRgn
EnumICMProfilesA
CreateDIBPatternBrushPt
GetLogColorSpaceA

comdlg32

PrintDlgA
LoadAlterBitmap

kernel32

HeapFree
VirtualAllocEx
CompareStringW
GetStringTypeW
SetConsoleCursorInfo
CommConfigDialogA
SetConsoleCtrlHandler
FreeLibraryAndExitThread
GetLogicalDrives
GetThreadSelectorEntry
InterlockedIncrement
FreeResource
TerminateProcess
HeapCreate
WriteFile
GetTimeZoneInformation
InterlockedExchange
VirtualAlloc
CompareStringA
GlobalDeleteAtom
HeapReAlloc
InterlockedDecrement
TlsAlloc
IsValidCodePage
EnterCriticalSection
GetModuleFileNameA
SetEvent
RtlUnwind
GetDiskFreeSpaceExA
GetExitCodeProcess
GetFileAttributesExA
QueryPerformanceCounter
DeleteCriticalSection
GetModuleFileNameW
HeapDestroy
GetModuleHandleA
FindAtomW
Sleep
GlobalUnlock
EnumSystemCodePagesW
GetCurrentProcess
FreeLibrary
GetTempPathW
WriteConsoleA
GetEnvironmentStrings
GetPrivateProfileStringW
OpenWaitableTimerA
WaitForSingleObjectEx
ReadConsoleOutputA
FreeEnvironmentStringsW
GetProcAddress
WriteConsoleW
GetVersionExA
CreateProcessA
UnhandledExceptionFilter
LoadLibraryA
GetFileAttributesExW
GetLocaleInfoW
GetCommandLineW
InitializeCriticalSection
RtlZeroMemory
SetStdHandle
GetCurrentProcessId
WritePrivateProfileSectionA
GetOEMCP
MoveFileW
GetTickCount
WideCharToMultiByte
CreateMutexA
SetConsoleCP
ReadConsoleOutputW
GetDateFormatA
SetCurrentDirectoryW
GetACP
TlsFree
OpenMutexA
SetEnvironmentVariableA
GetCompressedFileSizeW
HeapSize
CreateFileW
GetStringTypeA
GetTimeFormatA
FreeEnvironmentStringsA
GetCPInfo
GlobalAddAtomW
ReadConsoleInputA
IsValidLocale
SetFilePointer
IsDebuggerPresent
EnumTimeFormatsW
PulseEvent
SetEndOfFile
LCMapStringA
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
ReadConsoleOutputCharacterW
TransmitCommChar
GetStartupInfoA
FlushFileBuffers
LeaveCriticalSection
GetCurrentThread
SetConsoleActiveScreenBuffer
VirtualQuery
EnumSystemLocalesA
SetLastError
WritePrivateProfileStructA
DeleteFileW
FlushConsoleInputBuffer
TlsGetValue
GetLastError
OpenFile
SetUnhandledExceptionFilter
SetHandleCount
ExitProcess
GetCommandLineA
GetProcessHeap
RemoveDirectoryW
LCMapStringW
GetFileType
TlsSetValue
ReadFile
VirtualFree
GetLocaleInfoA
GetSystemTimeAsFileTime
GetConsoleMode
MultiByteToWideChar
GetStdHandle
GetUserDefaultLCID
GetConsoleOutputCP
HeapAlloc
GetStartupInfoW
SetThreadIdealProcessor
GetConsoleCP
CloseHandle
CreateFileA

shell32

ShellAboutW
SHBrowseForFolderW
InternalExtractIconListW
SHGetDataFromIDListW
DragFinish

advapi32

CryptSetProviderW
LookupPrivilegeValueW
RegQueryInfoKeyW
CreateServiceW
LookupAccountSidA
CryptHashSessionKey
CryptDuplicateKey

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c8167acc59978f83dab29ae89cfeb8b

Headers

File Characteristics

Imports

comctl32

user32

gdi32

comdlg32

kernel32

shell32

advapi32

Sections

.text Size: 208KB - Virtual size: 204KB

.rdata Size: 256KB - Virtual size: 253KB

.data Size: 116KB - Virtual size: 140KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 208KB - Virtual size: 204KB

.rdata
Size: 256KB - Virtual size: 253KB

.data
Size: 116KB - Virtual size: 140KB

.rsrc
Size: 16KB - Virtual size: 12KB