4c8815bb569b52ff9d7501682547b914

Sharing

Copy URL Twitter E-mail

General

Target

4c8815bb569b52ff9d7501682547b914
Size

208KB
MD5

4c8815bb569b52ff9d7501682547b914
SHA1

e317cc0461ecc80f30d0a1493b43c594311ef22e
SHA256

1e6ec196f89266dbd2a2bb6c4caeca9879ab361ecdbf9dd90729e861a39bfd03
SHA512

943f37ca002aaa32322a2da112b13ddb49b3d9edcbefdb6e7ca28054d5c7458ef43e822320b6d149ed34f455103da6d261118817ae17a2b240475e42baab4c27
SSDEEP

3072:QdU+d/SohMzaLo7Yy6q1WBJFansSQI8cE+ldb5VNbJbmMj6Qrxa3:CUj+M7u8sN5cEyFNa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c8815bb569b52ff9d7501682547b914

Files

4c8815bb569b52ff9d7501682547b914
.exe windows:4 windows x86 arch:x86

2704d631847f4993ee123d9a01a0d9c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
CreateToolbarEx

kernel32

GetSystemDirectoryA
QueryPerformanceFrequency
GetVersion
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcatA
HeapFree
lstrlenA
lstrcpyA
HeapAlloc
GetProcessHeap
ReadProcessMemory
OpenProcess
Sleep
GetVersionExA
GetUserDefaultLangID
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
ReadFile
GetStringTypeW
DeleteFileA
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
WriteFile
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetCurrentDirectoryA
GetCurrentProcessId
GetLogicalDrives
GetDriveTypeA
GetTickCount
LoadLibraryA
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
DosDateTimeToFileTime
GetTimeFormatA
DeviceIoControl
FormatMessageA
LocalFree
GetModuleHandleA
GetProcAddress
SetLastError
CreateFileA
LCMapStringW
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
GetLastError
CloseHandle
GetStringTypeA

user32

SetClipboardData
EmptyClipboard
OpenClipboard
CallWindowProcA
GetClientRect
DrawIconEx
SetWindowLongA
SetWindowTextA
DestroyIcon
IsZoomed
IsIconic
ClientToScreen
ScreenToClient
GetDlgItemTextA
EnableWindow
IsWindowEnabled
SetDlgItemTextA
CheckDlgButton
IsDlgButtonChecked
RegisterWindowMessageA
CloseClipboard
GetMessageA
TranslateAcceleratorA
IsWindow
IsDialogMessageA
SetCursor
InvalidateRect
ChildWindowFromPoint
GetSysColor
GetSysColorBrush
LoadCursorA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
RegisterClassA
SetCapture
DialogBoxParamA
GetMenu
EnableMenuItem
CreateMenu
GetFocus
DrawTextA
LoadAcceleratorsA
GetSystemMetrics
GetDlgItem
MoveWindow
GetWindowRect
GetParent
InsertMenuA
SetTimer
ReleaseCapture
SetFocus
DefWindowProcA
BeginPaint
EndPaint
GetCursorPos
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
LoadStringA
GetDC
ReleaseDC
WinHelpA
InvalidateRgn
SetWindowPos
PostMessageA
DestroyWindow
CheckMenuItem
SendMessageA
MessageBoxA
PostQuitMessage
EndDialog
CheckRadioButton

gdi32

GetTextExtentPoint32A
SetBkColor
CreateSolidBrush
GetTextMetricsA
CreateCompatibleDC
DeleteObject
GetStockObject
GetObjectA
CreateFontIndirectA
SetBkMode
SetTextColor
ExtTextOutA
SelectObject

comdlg32

GetOpenFileNameA
FindTextA
ChooseColorA
ChooseFontA
GetSaveFileNameA

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
AdjustTokenPrivileges

shell32

ShellExecuteExA
ShellExecuteA
SHGetFileInfoA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2704d631847f4993ee123d9a01a0d9c5

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

version

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 97KB

.rsrc Size: 112KB - Virtual size: 108KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 97KB

.rsrc
Size: 112KB - Virtual size: 108KB