4e3287f15a4e5acc5f9622eef7b21738

Sharing

Copy URL Twitter E-mail

General

Target

4e3287f15a4e5acc5f9622eef7b21738
Size

175KB
MD5

4e3287f15a4e5acc5f9622eef7b21738
SHA1

a241c87561ef91509fe1f4c6d4b0f194da5f2b74
SHA256

9e885e61b44b947b0ef480f11834ea4b595323e17b8fbad57c67be246da4d6b6
SHA512

5d3ad3316afd58698ed80338e503d88a59bc1ab01eb11dcc5d9f1c20b696f932c53bf1bb7fac5dbf9da613bcbb17860da31a68b205724cf5c51bc4e4977aa839
SSDEEP

3072:MctZ35GbI4lXXJO9GkKwNb2X+q3O7DHDer283r3N1uf+WuNgDFTCT6HcAT:LL3AbFXJBw52vXrfuGn82T4Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e3287f15a4e5acc5f9622eef7b21738

Files

4e3287f15a4e5acc5f9622eef7b21738
.exe windows:4 windows x86 arch:x86

8a4ccc50197c6cf6c8b51df2b8b1fded

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

winmm

timeGetTime
timeSetEvent

ole32

CreateStreamOnHGlobal
CoUninitialize
StgOpenStorage
StgCreateDocfile
CoCreateInstance
OleInitialize
GetRunningObjectTable
StringFromGUID2
StgIsStorageFile
CoGetClassObject
OleUninitialize
CoTaskMemFree
CreateBindCtx
CoInitialize
CoInitializeSecurity
BindMoniker
CreateItemMoniker
CoTaskMemRealloc
CoTaskMemAlloc
CoSetProxyBlanket
OleLockRunning
CLSIDFromProgID
CLSIDFromString

gdi32

SelectPalette
SelectObject
DeleteDC
GetDeviceCaps
RealizePalette
BitBlt
StretchDIBits
CreateFontA
CreateDIBitmap
GetDIBits
CreateCompatibleBitmap
CreateDIBSection
DeleteObject
GetStockObject
GetObjectA
CreateCompatibleDC
CreateSolidBrush
ExtEscape
SetStretchBltMode
SetBkMode

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

shlwapi

PathFileExistsW
PathCombineW

gdiplus

GdipCreateBitmapFromFile
GdipDisposeImage
GdipGetImagePixelFormat
GdipCreateBitmapFromFileICM
GdipFree
GdipAlloc
GdipCloneImage

user32

PostThreadMessageA
UnregisterClassA
SetWindowTextA
GetClassNameA
PeekMessageA
ReleaseDC
GetQueueStatus
GetWindow
IsChild
SetFocus
SendMessageA
CreateAcceleratorTableA
EqualRect
GetWindowRect
GetClassInfoExA
GetClientRect
SendMessageTimeoutA
CopyRect
CreateDialogParamA
GetSysColor
GetWindowLongA
DrawTextA
BeginPaint
GetWindowTextLengthA
GetWindowTextA
InvalidateRect
EnumDisplayDevicesA
GetFocus
FindWindowA
DestroyAcceleratorTable
SetTimer
wvsprintfA
MoveWindow
CreateWindowExA
DefWindowProcA
GetDesktopWindow
ShowWindow
SetWindowLongA
PostMessageA
GetDC
wsprintfA
SetRect
GetDlgItem
InvalidateRgn
LoadCursorA
GetParent
ReleaseCapture
KillTimer
MsgWaitForMultipleObjects
IsWindow
RegisterWindowMessageA
RegisterClassExA
GetActiveWindow
FillRect
SetCapture
DestroyWindow
CallWindowProcA
DispatchMessageA
SetParent
SendNotifyMessageA
EndPaint
CharNextA
RedrawWindow
SetWindowPos

kernel32

LocalFree
GetShortPathNameW
MapViewOfFile
GlobalAlloc
CreateFileA
GlobalSize
CreateFileMappingA
GetProcessId
DisableThreadLibraryCalls
LocalAlloc
ReadFile
GetTickCount
EnumResourceTypesA
WideCharToMultiByte
GetFileSize
CreateFileW
SetFilePointer
GetFileAttributesA
WriteFile
UnmapViewOfFile
GlobalFree
Sleep
CloseHandle

version

GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerQueryValueW
VerQueryValueA

advapi32

RegSetValueExA
RegEnumValueA
CryptDestroyHash
RegQueryInfoKeyA
CryptGetHashParam
RegCloseKey
RegQueryValueExA
CryptEncrypt
CryptAcquireContextA
CryptCreateHash
RegCreateKeyExA
CryptDestroyKey
CryptReleaseContext
RegEnumKeyExA
CryptHashData
CryptImportKey
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a4ccc50197c6cf6c8b51df2b8b1fded

Headers

File Characteristics

Imports

shell32

winmm

ole32

gdi32

wininet

setupapi

shlwapi

gdiplus

user32

kernel32

version

advapi32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: 72KB - Virtual size: 71KB

.tls Size: 1024B - Virtual size: 96KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: 72KB - Virtual size: 71KB

.tls
Size: 1024B - Virtual size: 96KB