4e7954c1bc927b61c7168bed51011c10

Sharing

Copy URL Twitter E-mail

General

Target

4e7954c1bc927b61c7168bed51011c10
Size

564KB
MD5

4e7954c1bc927b61c7168bed51011c10
SHA1

d44202355d74d1dc94fbb4a555693522237cd65d
SHA256

e94d300e6023587caebb5fa909daa7f88fb1b660ebe0a972253cde66b205fa1e
SHA512

39e3709fe82965cb58ac969a366c30cb39d8c6cb6c999839182a483d7faf82c2d09dac09d02396298e30f945c483054bd9f8aa4b8595331cae46a70b24f7d534
SSDEEP

12288:EZBOTN6CKFNi/17fqUusLLczrhI0ST3tOA:EkKFN4jQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e7954c1bc927b61c7168bed51011c10

Files

4e7954c1bc927b61c7168bed51011c10
.exe windows:4 windows x86 arch:x86

aa470d773b0764ef7e9911bff3d0c038

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetACP
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsW
GetTimeZoneInformation
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
GetCurrentDirectoryA
TerminateProcess
HeapFree
GetStartupInfoA
GetDiskFreeSpaceA
RaiseException
RtlUnwind
SetEndOfFile
LCMapStringA
GetVolumeInformationA
WritePrivateProfileStringA
DeleteFileA
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
LCMapStringW
GetStringTypeA
SetThreadPriority
Sleep
HeapDestroy
HeapAlloc
GetCommandLineA
ExitProcess
MulDiv
GetWindowsDirectoryA
CreateFileA
GetFileTime
CloseHandle
GlobalMemoryStatus
GetTickCount
GetModuleFileNameA
MultiByteToWideChar
lstrcatA
WinExec
lstrcpyA
LocalReAlloc
LocalUnlock
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
lstrcmpiA
lstrlenA
GetOEMCP
GetCPInfo
TlsGetValue
TlsSetValue
GlobalHandle
TlsFree
GetProfileStringA
GlobalFlags
TlsAlloc
LocalAlloc
GetProcessVersion
SizeofResource
lstrcmpA
FindFirstFileA
FindClose
GetCurrentThread
WaitForSingleObject
LocalFree
GetThreadLocale
SetLastError
LoadLibraryA
WideCharToMultiByte
InterlockedIncrement
GetCurrentThreadId
FreeLibrary
GetVersion
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
GetProcAddress
GlobalDeleteAtom
GetModuleHandleA
DeleteCriticalSection
VirtualProtect
InterlockedDecrement
InitializeCriticalSection
EnterCriticalSection
FileTimeToLocalFileTime
GetFileSize
GetEnvironmentStrings
LeaveCriticalSection
FormatMessageA
SetErrorMode
GetFullPathNameA
GetFileAttributesA
CreateFileMappingA
lstrcpynA
lstrlenW
MapViewOfFile
UnmapViewOfFile
LoadResource
FileTimeToSystemTime
FindResourceA
GetPrivateProfileIntA
LockResource
GetLastError
SetEnvironmentVariableA
HeapCreate
GlobalFree

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegSetValueA
RegSetValueExA
RegCreateKeyExA

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17

comdlg32

GetFileTitleA

gdi32

GetStockObject
PatBlt
Rectangle
CreateBitmap
DeleteDC
SetBkColor
SaveDC
RestoreDC
SetStretchBltMode
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
GetObjectA
GetViewportExtEx
GetWindowExtEx
PtVisible
CreatePatternBrush
Escape
GetMapMode
RectVisible
DPtoLP
StretchDIBits
SetRectRgn
GetTextColor
GetBkColor
GetCharWidthA
LPtoDP
GetTextMetricsA
GetTextExtentPointA
SetTextColor
GetClipBox
StretchBlt
CreatePalette
SelectPalette
SelectObject
SetBkMode
CreateDIBitmap
InvertRgn
BeginPath
TextOutA
MoveToEx
CloseFigure
LineTo
PathToRegion
DeleteObject
EndPath
OffsetRgn
CreateRectRgnIndirect
CombineRgn
GetDeviceCaps
GetStretchBltMode
CreateSolidBrush
GetTextExtentPoint32A
BitBlt
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
CreateFontIndirectA
RealizePalette
CreateRectRgn
ExtTextOutA

ole32

CoRevokeClassObject
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
OleFlushClipboard
OleInitialize
CLSIDFromString
CLSIDFromProgID
ProgIDFromCLSID
CoCreateInstance
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
CoGetClassObject

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
VariantCopy
SysAllocStringLen
VariantClear
SysFreeString
SysAllocString

oledlg

ord8

olepro32

ord253

shell32

DragFinish
DragQueryFileA
SHGetMalloc
SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetPathFromIDListA
ShellExecuteA

user32

SetParent
GetNextDlgGroupItem
PostThreadMessageA
CharUpperA
SetWindowContextHelpId
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadAcceleratorsA
ShowOwnedPopups
TranslateMessage
ValidateRect
SetRect
WindowFromPoint
SetRectEmpty
DestroyMenu
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
ClientToScreen
LoadStringA
wvsprintfA
TranslateAcceleratorA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckDlgButton
SendDlgItemMessageA
DispatchMessageA
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetClassInfoA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
RegisterClipboardFormatA
EndDialog
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
ShowWindow
GetAsyncKeyState
GetWindowLongA
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetMenuItemCount
GetMenuItemID
CharNextA
GetWindowDC
SetWindowRgn
DrawFrameControl
SetActiveWindow
GetMessageA
GetCapture
GetMenu
IsZoomed
EnableMenuItem
SetPropA
AdjustWindowRectEx
SystemParametersInfoA
GetActiveWindow
OffsetRect
GetDCEx
DrawIconEx
IsWindow
OpenIcon
SetWindowPos
DrawIcon
LoadIconA
UnregisterHotKey
RegisterHotKey
PeekMessageA
PostQuitMessage
FindWindowA
GetPropA
SendMessageTimeoutA
MessageBoxA
KillTimer
GetClassNameA
CopyAcceleratorTableA
LockWindowUpdate
WaitMessage
GetWindowThreadProcessId
WinHelpA
wsprintfA
GetNextDlgTabItem
SetTimer
IsIconic
GetLastActivePopup
MessageBeep
GetCursorPos
SetForegroundWindow
IsWindowVisible
LoadImageA
GetSystemMetrics
GetDC
DrawTextA
CreateIconIndirect
DestroyIcon
ReleaseDC
GetWindowRect
GetDesktopWindow
MapWindowPoints
IsChild
DrawEdge
CopyRect
InflateRect
DrawFocusRect
LoadMenuA
SetWindowLongA
GetSysColor
GetSysColorBrush
GetParent
OpenClipboard
SetClipboardData
CloseClipboard
GetSubMenu
InvalidateRect
GetClientRect
PtInRect
SetCapture
ReleaseCapture
UpdateWindow
PostMessageA
SetCursor
LoadCursorA
EnableWindow
SendMessageA
GetWindow
GetKeyState
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
UnregisterClassA

winmm

timeSetEvent

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa470d773b0764ef7e9911bff3d0c038

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

comdlg32

gdi32

ole32

oleaut32

oledlg

olepro32

shell32

user32

winmm

winspool.drv

Sections

.text Size: 236KB - Virtual size: 233KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 240KB - Virtual size: 243KB

.text
Size: 236KB - Virtual size: 233KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 240KB - Virtual size: 243KB