4ebf4ffb0d74bbf54dbb833c6da8b41c

Sharing

Copy URL Twitter E-mail

General

Target

4ebf4ffb0d74bbf54dbb833c6da8b41c
Size

5.3MB
MD5

4ebf4ffb0d74bbf54dbb833c6da8b41c
SHA1

174716522c5c2313fd7f5e96d85e42165e88a4b9
SHA256

05f9b76e591d113764abc6a30ba7aa62200240a51214afeb8b17e08b75b86833
SHA512

7718115461d72368dc29488a0790d7c7725a611eaa65f55f27379e699a56394f4ee5d77f330b121f27add278c6ee565cfa0b54c323b48bd29e4ec851b50b1430
SSDEEP

98304:I7Jy0Axi7oMOlJ858mH3kC/7G4xLgxPLW+dj1hxh5NXxstDvyTuK/E:AyrxaOl25b3ZDxLwPyo1hxjQtDEuK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ebf4ffb0d74bbf54dbb833c6da8b41c

Files

4ebf4ffb0d74bbf54dbb833c6da8b41c
.exe windows:4 windows x86 arch:x86

995387b4581fe41b6f4866c97fa7599b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
SetErrorMode
FreeLibrary
GetProcAddress
RemoveDirectoryA
DeleteFileA
GetDriveTypeA
FindNextFileA
GetFileAttributesA
CreateDirectoryA
MoveFileA
GetSystemInfo
GetVersion
OpenProcess
GetLastError
GetWindowsDirectoryA
SetUnhandledExceptionFilter
TerminateThread
WaitForSingleObject
CreateThread
SetCurrentDirectoryA
GetCurrentDirectoryA
SetFilePointer
GetCurrentProcess
GetCurrentProcessId
GetThreadContext
VirtualQuery
IsBadWritePtr
GlobalMemoryStatus
CreateToolhelp32Snapshot
Process32First
FindFirstFileA
GetModuleFileNameA
GetVersionExA
FindClose
GetDiskFreeSpaceA
Process32Next
GetTempPathA
InterlockedIncrement
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
WriteFile
LoadResource
FreeResource
FindResourceA
LocalAlloc
SizeofResource
LockResource
LocalFree
LocalLock
LocalUnlock
GetOEMCP
HeapAlloc
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
FileTimeToSystemTime
HeapFree
GetCurrentThreadId
HeapReAlloc
SetStdHandle
VirtualAlloc
FlushFileBuffers
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
LCMapStringA
ReadFile
RaiseException
RtlUnwind
VirtualFree
InitializeCriticalSection
HeapDestroy
GetEnvironmentVariableA
HeapCreate
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
SetEnvironmentVariableW
GetFullPathNameA
FileTimeToLocalFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
SetFileAttributesA
GetCPInfo
GetACP
UnhandledExceptionFilter
CompareStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
HeapSize
GetEnvironmentStringsW
GetFileType
WideCharToMultiByte
GetEnvironmentStrings
GetStdHandle
SetHandleCount
DeleteCriticalSection

user32

TranslateMessage
DispatchMessageA
CharUpperA
DefWindowProcA
GetMessageA
PostThreadMessageA
DestroyWindow
CreateWindowExA
RegisterClassA
PeekMessageA
PostQuitMessage
IsDialogMessageA
SetWindowTextA
MessageBoxA
LoadStringA
FindWindowA
GetSysColor
IsWindow
CreateDialogIndirectParamA
GetParent
SetWindowPos
GetWindowRect
UpdateWindow
SystemParametersInfoA
EndDialog
GetDC
InvalidateRect
SendDlgItemMessageA
CharNextA
CharPrevA
SendMessageA
GetSystemMetrics
LoadIconA
CharLowerA
ReleaseDC

advapi32

RegSetValueExA
RegCreateKeyA
RegCloseKey
AllocateAndInitializeSid
EqualSid
OpenProcessToken
RegQueryValueExA
RegOpenKeyA
GetTokenInformation
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueA
RegDeleteValueA
RegQueryValueA
RegEnumKeyA

gdi32

CreateSolidBrush
SetBkColor
SetTextColor
DeleteObject
GetDeviceCaps

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12.3MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

995387b4581fe41b6f4866c97fa7599b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

comctl32

version

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 25KB

.rsrc Size: 12.3MB - Virtual size: 12.3MB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 25KB

.rsrc
Size: 12.3MB - Virtual size: 12.3MB