6a0bc3c42a5a950557facf03e779f68d07d176ecf394491ff1cbfad631f2a763

Sharing

Copy URL Twitter E-mail

General

Target

6a0bc3c42a5a950557facf03e779f68d07d176ecf394491ff1cbfad631f2a763
Size

1.3MB
MD5

9a4970b107fc45a9879d5b8b1787c717
SHA1

d228d5445f0a1136dcbb6820d1cb0c07f4741485
SHA256

6a0bc3c42a5a950557facf03e779f68d07d176ecf394491ff1cbfad631f2a763
SHA512

8bf0afec2a00906c2f918ad37ba84ebe29a26b7fb738d6161910cfafcde3454aeee7184e1592a1022fd61573ec856959c5ebd92271df9df790b06c4e66f28652
SSDEEP

12288:C4PidrfkOarfkOkrfkOWrfkOkrfkOkrfkOYnMqCKe:fPid7Ra7Rk7RW7Rk7Rk7RYnMqCKe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0bc3c42a5a950557facf03e779f68d07d176ecf394491ff1cbfad631f2a763

Files

6a0bc3c42a5a950557facf03e779f68d07d176ecf394491ff1cbfad631f2a763
.exe windows:6 windows x86 arch:x86

52f0a8b071c312740e364ac7b8164443

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
WritePrivateProfileStringA
GetTickCount64
GetPrivateProfileIntA
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleFileNameA
Sleep
GetLocalTime
IsDebuggerPresent

user32

BeginPaint
EndPaint
GetClientRect
FillRect
DrawTextA
PostQuitMessage
CreatePopupMenu
AppendMenuW
SetWindowTextA
GetWindowRect
GetWindowLongW
SetWindowLongW
ClientToScreen
GetSystemMetrics
GetFocus
IsWindowVisible
IsWindowEnabled
TrackPopupMenu
DefWindowProcW
GetDlgItem
GetWindowTextA
EndDialog
SetWindowRgn
CallWindowProcW
SetForegroundWindow
DestroyWindow
DialogBoxParamW
SendMessageW
CheckMenuItem
SetFocus
EnableMenuItem
UpdateWindow
ShowWindow
CreateWindowExW
BringWindowToTop
ModifyMenuW
SetWindowTextW
EnableWindow
MessageBoxW
InvalidateRect
SetWindowPos
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
FlashWindow

gdi32

CreateFontW
AddFontMemResourceEx
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetTextColor
SetBkColor
BitBlt
DeleteObject
DeleteDC
CreateRoundRectRgn
CreateSolidBrush

msvcp140

?_Xlength_error@std@@YAXPBD@Z

winmm

PlaySoundW

vcruntime140

memmove
memset
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memcpy
strrchr
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__p__commode
__stdio_common_vsprintf_s
_set_fmode

api-ms-win-crt-runtime-l1-1-0

_c_exit
_register_thread_local_exe_atexit_callback
exit
_configure_wide_argv
_initterm_e
_set_app_type
_initialize_wide_environment
_controlfp_s
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_cexit
_initterm
terminate
_exit
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_get_wide_winmain_command_line

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-convert-l1-1-0

_itoa_s
atoi

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc
_callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52f0a8b071c312740e364ac7b8164443

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msvcp140

winmm

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 2KB - Virtual size: 2KB