4459aabc2bd3ff2f04e8b2b3b8647482

Sharing

Copy URL Twitter E-mail

General

Target

4459aabc2bd3ff2f04e8b2b3b8647482
Size

269KB
MD5

4459aabc2bd3ff2f04e8b2b3b8647482
SHA1

5810ed467beda205cb8a147aa21cd531f65940bb
SHA256

30c0840dac46e241c4e767b09b1c92b574f3e381ce9e7793593d11e78658fa00
SHA512

60552171b33d789114565ad02ba5193611b96194cef0edca116fe244b4972d79095a08d02d649009eacc014fd90d7c17555980f3c4dc89b90e526eb27474b37a
SSDEEP

6144:nIcUBucWQYcI3x7c93ovjqgUQ+qTKbA9v3P:nIcUBucdYcsxIShDSAV3P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4459aabc2bd3ff2f04e8b2b3b8647482

Files

4459aabc2bd3ff2f04e8b2b3b8647482
.exe windows:4 windows x86 arch:x86

44a3ea2f229e01c32eec53eb29e8e0ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

FlushInstructionCache
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcess
GetDiskFreeSpaceA
FindClose
LocalFileTimeToFileTime
QueryPerformanceFrequency
DosDateTimeToFileTime
GetFileAttributesA
InterlockedDecrement
lstrcmpA
FreeLibrary
LoadLibraryA
HeapAlloc
CreateFileA
GetFileSize
FindFirstFileA
SetFilePointer
GetModuleFileNameA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GetProcAddress
lstrcatA
ReadFile
CreateMutexA
ReleaseMutex
GetTickCount
WriteFile
MoveFileA
GetTempFileNameA
GetTempPathA
LockResource
CreateThread
GetSystemInfo
HeapCreate
GetShortPathNameA
MapViewOfFile
CreateFileMappingA
GetModuleHandleA
GetUserDefaultLangID
OpenEventA
CreateDirectoryA
lstrcpynA
SetFileAttributesA
GetSystemDirectoryA
GetStartupInfoA
ExitProcess
GetCommandLineA
DebugBreak
HeapReAlloc
HeapFree
GetWindowsDirectoryA
GetDriveTypeA
GlobalSize
GlobalLock
GlobalAlloc
FreeResource
LocalFree
FormatMessageA
GlobalFree
GlobalUnlock
IsBadReadPtr
VirtualQuery
VirtualProtect
SearchPathA
ResetEvent
QueryPerformanceCounter
SystemTimeToFileTime
RtlUnwind
GetStringTypeA
GetStringTypeW
WaitForSingleObject
EnterCriticalSection
lstrlenW
CreateEventA
LoadResource
GetCurrentProcessId
Sleep
lstrlenA
lstrcpyA
CloseHandle
GetVersionExA
CompareStringW
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
GetLastError
SetLastError
LeaveCriticalSection
AddAtomA
SetFileTime
SetEvent
RemoveDirectoryA
lstrcmpiA
DeleteFileA
GetAtomNameA
GetFileTime
CreateProcessA
SizeofResource
FindResourceA
UnmapViewOfFile

user32

GetWindow
SystemParametersInfoA
GetClientRect
GetParent
MapWindowPoints
SetWindowLongA
BeginPaint
IsWindow
EndPaint
PostThreadMessageA
GetDesktopWindow
ScreenToClient
ShowWindow
LoadImageA
SendMessageA
SendDlgItemMessageA
LoadStringA
TranslateMessage
LoadCursorA
SetDlgItemTextA
GetWindowLongA
MessageBoxA
GetMessageA
SetWindowTextA
FillRect
WaitForInputIdle
InvalidateRect
UpdateWindow
GetWindowRect
PtInRect
EndDialog
DestroyCursor
GetSysColor
GetActiveWindow
DialogBoxParamA
GetForegroundWindow
MsgWaitForMultipleObjects
PeekMessageA
DispatchMessageA
wsprintfA
CharNextA
KillTimer
SetTimer
IsDlgButtonChecked
CheckDlgButton
IsDialogMessageA
SetForegroundWindow
GetPropA
EnableMenuItem
SetPropA
RemovePropA
CreateDialogIndirectParamA
SetWindowRgn
DestroyWindow
GetDlgItem
EnableWindow
ClientToScreen
SetCursor
SetWindowPos
DrawTextA
GetWindowDC
GetWindowTextA
PostMessageA
ReleaseDC
GetDialogBaseUnits
GetClassNameA
SetFocus
CallWindowProcA
DefWindowProcA
MoveWindow
CharLowerBuffA
GetAsyncKeyState
RegisterClassA
CreateWindowExA

gdi32

GetObjectA
RestoreDC
TextOutA
SetBkMode
SelectObject
GetDeviceCaps
CreateRectRgn
SaveDC
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
SetBkColor
BitBlt
SetTextColor
CreateFontIndirectA
GetStockObject
CreateSolidBrush
PatBlt

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA

shell32

SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA

ole32

CoInitialize
CoFreeUnusedLibraries
StgOpenStorage
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoReleaseMarshalData
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
GetRunningObjectTable
CoGetInterfaceAndReleaseStream
CoUninitialize
StringFromCLSID
CoTaskMemFree
StringFromGUID2
CoCreateGuid

oleaut32

RegisterTypeLi
SafeArrayGetLBound
SafeArrayGetUBound
LoadTypeLi
SafeArrayCreate
SafeArrayPutElement
SafeArrayCopy
VariantChangeType
LoadRegTypeLi
SafeArrayGetElement
VariantCopy
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
VariantClear

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44a3ea2f229e01c32eec53eb29e8e0ed

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

version

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 6KB

.rsrc Size: 68KB - Virtual size: 64KB

.yrdata Size: 68KB - Virtual size: 68KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 68KB - Virtual size: 64KB

.yrdata
Size: 68KB - Virtual size: 68KB