4cf00398a647ad2cf480cc4d42649b9d

Sharing

Copy URL Twitter E-mail

General

Target

4cf00398a647ad2cf480cc4d42649b9d
Size

548KB
MD5

4cf00398a647ad2cf480cc4d42649b9d
SHA1

d5bfb02dc3861aba3c151454a73e179b27bb1154
SHA256

428e66fa0b97517e4c2a0dd2c1259ed4ec7b3af406a623055fbc91dbeb87a5e7
SHA512

69b8b81c1ce61c1c84269653ec53d448ec5392d8a043a65035f332ba5d24f8b84f6db7ca086cd93c6d9a85e484693423c716e23cef1bb9a5445ba331ecb8400c
SSDEEP

12288:cVWTo6S/Z9cc5OEpgIJXIqdIo3+DS4cbcVjFtwCG44TPSl7MyDomBdO:yWTo6S/Z9/5OHI/d5vbcVj7HG44TP6pk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cf00398a647ad2cf480cc4d42649b9d

Files

4cf00398a647ad2cf480cc4d42649b9d
.exe windows:4 windows x86 arch:x86

4b3acbdcf087247ecd547b05fa91648f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PrintDlgA
ChooseFontA
FindTextW

advapi32

LookupSecurityDescriptorPartsW
RegCreateKeyW
CryptContextAddRef
RegEnumKeyExW
CryptCreateHash
CryptGetProvParam
RegEnumKeyA
LookupPrivilegeDisplayNameA
RegLoadKeyA

user32

SetDebugErrorLevel
GetMenuStringW
PostThreadMessageW
CheckRadioButton
PostQuitMessage
EnumDisplayDevicesW
RegisterClassExA
GetWindowTextLengthW
LoadImageA
GetSystemMetrics
GetScrollInfo
LoadIconA
GetInputState
GetSysColorBrush
BeginPaint
EndDialog
IsCharLowerW
DefMDIChildProcW
MessageBoxExA
DdeConnect
SetMessageExtraInfo
GetListBoxInfo
GetForegroundWindow
SetWindowsHookExA
InvertRect
MapDialogRect
ImpersonateDdeClientWindow
SetPropW
SetWindowPos
SetScrollPos
CountClipboardFormats
GetCaretBlinkTime
EmptyClipboard
GetMenuItemCount
DrawTextA
GetLastActivePopup
SendInput
CheckMenuItem
GetDlgItemTextW
TrackMouseEvent
DdeQueryConvInfo
RegisterClassA
EnumDesktopsW
FrameRect
wsprintfW
ReleaseDC
SetMenuItemInfoW
TranslateAccelerator
GetUpdateRect
GetClassNameA
GetDialogBaseUnits
SendDlgItemMessageA
SetKeyboardState
CallNextHookEx
LoadKeyboardLayoutA
GetMenuItemInfoW
DefWindowProcW
RemovePropW
CharUpperBuffA
GetFocus
GetTabbedTextExtentW
TileChildWindows
LoadCursorA

kernel32

GetCommandLineW
GetProfileSectionW
ReadFile
SetFilePointer
CreateMailslotW
GetCPInfo
GlobalFix
GetCurrentProcessId
AddAtomW
EnumDateFormatsW
GetProcAddress
SetConsoleTitleW
WideCharToMultiByte
LocalFree
VirtualAlloc
OpenMutexA
GetStartupInfoA
GetSystemTimeAsFileTime
CompareStringA
TerminateProcess
QueryPerformanceCounter
GetEnvironmentStringsW
TlsFree
RtlUnwind
GetLogicalDriveStringsA
HeapReAlloc
MultiByteToWideChar
LockFile
GetNamedPipeHandleStateA
LCMapStringA
WriteProfileSectionW
GetShortPathNameW
UnlockFileEx
GetStartupInfoW
MoveFileExW
CompareStringW
AddAtomA
LocalAlloc
EnumDateFormatsExW
GetFileType
FlushFileBuffers
GetLongPathNameW
OpenEventA
TlsAlloc
GetStringTypeW
TlsGetValue
GetCurrentThread
SetLastError
GetStdHandle
GetFileTime
GlobalSize
ExitProcess
GetModuleHandleA
GetVersionExA
FindClose
GetSystemDirectoryW
GetCommandLineA
WaitForSingleObject
LoadLibraryA
GetShortPathNameA
GetStringTypeA
GlobalGetAtomNameW
UnhandledExceptionFilter
GetTimeZoneInformation
FreeEnvironmentStringsA
LockFileEx
LeaveCriticalSection
GetSystemTime
InterlockedExchange
OpenMutexW
GetCurrencyFormatW
GetTempPathA
EnterCriticalSection
WriteProfileStringA
SetHandleCount
VirtualQueryEx
WriteConsoleOutputAttribute
ReadConsoleInputW
GetThreadSelectorEntry
GetFileAttributesExA
HeapFree
ReadConsoleOutputW
LocalUnlock
FreeLibraryAndExitThread
FillConsoleOutputAttribute
WriteConsoleOutputW
GetTickCount
InterlockedDecrement
FillConsoleOutputCharacterW
GetCurrentThreadId
WaitCommEvent
FindNextChangeNotification
SetEnvironmentVariableA
InterlockedIncrement
GetUserDefaultLangID
VirtualFree
HeapAlloc
OpenSemaphoreW
GetThreadContext
FileTimeToLocalFileTime
EnumResourceTypesW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GlobalFree
CloseHandle
CreateMutexA
lstrlen
DeleteCriticalSection
TlsSetValue
CopyFileExA
GetModuleFileNameW
HeapCreate
LocalSize
WritePrivateProfileStructA
MapViewOfFileEx
GetEnvironmentStrings
GetLocalTime
InitializeCriticalSection
lstrcmpi
EnumDateFormatsA
CreatePipe
GetCurrentProcess
UnmapViewOfFile
GetEnvironmentVariableW
GetLastError
GetVersion
LCMapStringW
EnumCalendarInfoExA
WritePrivateProfileSectionW
IsBadWritePtr
GetDateFormatA
HeapDestroy
ReleaseSemaphore
WriteFile
VirtualQuery
FreeEnvironmentStringsW
GetModuleFileNameA

shell32

SHUpdateRecycleBinIcon
FindExecutableW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder

comctl32

InitCommonControlsEx
DrawStatusText
ImageList_ReplaceIcon
CreatePropertySheetPageA
ImageList_AddIcon
ImageList_Create
ImageList_SetFlags

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b3acbdcf087247ecd547b05fa91648f

Headers

File Characteristics

Imports

comdlg32

advapi32

user32

kernel32

shell32

comctl32

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 260KB - Virtual size: 258KB

.data Size: 112KB - Virtual size: 119KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 260KB - Virtual size: 258KB

.data
Size: 112KB - Virtual size: 119KB

.rsrc
Size: 20KB - Virtual size: 18KB