5136a1feb98d5d1b1d549d74e9fbf407

Sharing

Copy URL Twitter E-mail

General

Target

5136a1feb98d5d1b1d549d74e9fbf407
Size

48KB
MD5

5136a1feb98d5d1b1d549d74e9fbf407
SHA1

7871d53619b5cf288530144b64d6d9dfcfbb5e61
SHA256

d61c2004bea958c2b92ef60e2e051ae825203770bcf7beaa9a17b37b2aa40db2
SHA512

2b11c10f0fbf30bdee71d38f7b74c3d36457b36cfbbc851e50540a0f1ac15e7d820b7d136937ba8630e95e8722f047bf6c2c61c39c218841043f8b110b2bd6c1
SSDEEP

768:SZ6pGtx1Y700gr7Jw5KeoMkxA38YoqtojYa1H5:7pGtzY70jW5PV8OLojj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5136a1feb98d5d1b1d549d74e9fbf407

Files

5136a1feb98d5d1b1d549d74e9fbf407
.exe windows:4 windows x86 arch:x86

fa8efa8121520a18e95fd9dcd49f9185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetGetConnectedState
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
HttpQueryInfoW

netapi32

Netbios

comctl32

_TrackMouseEvent
ord17

kernel32

MapViewOfFile
GlobalLock
GlobalAlloc
CloseHandle
lstrcpyW
CreateFileMappingW
GetProcAddress
GlobalFree
GlobalUnlock
_lclose
_lread
UnmapViewOfFile
FreeLibrary
GetShortPathNameA
CreateMutexW
lstrlenW
_lcreat
_llseek
CreateProcessA
GetDriveTypeA
GetLogicalDriveStringsA
GetLogicalDriveStringsW
FindClose
FindNextFileA
SetCurrentDirectoryA
FindFirstFileA
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
GetStringTypeA
GetStringTypeW
GetLastError
LCMapStringW
LCMapStringA
LoadLibraryA
GetSystemDirectoryA
_lwrite
_lopen
GetSystemTime
WriteFile
VirtualFree
HeapCreate
HeapFree
GetFileType
GetStdHandle
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsA
GetModuleFileNameA
RtlUnwind
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateDirectoryA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc

user32

SendDlgItemMessageW
SendDlgItemMessageA
GetWindowRect
EndDialog
SetClipboardData
EmptyClipboard
GetWindowTextA
IsWindow
ClientToScreen
LoadMenuW
CreateWindowExW
GetWindowLongW
SetWindowLongW
UpdateWindow
GetMessageW
TranslateMessage
PostMessageW
DispatchMessageW
InsertMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
GetWindowTextW
IsWindowEnabled
GetFocus
OpenClipboard
GetClipboardData
CloseClipboard
SendMessageW
EndPaint
SetFocus
PostQuitMessage
ShowWindow
SetRect
KillTimer
FindWindowW
EnumWindows
wsprintfA
InvalidateRect
MoveWindow
GetActiveWindow
SetWindowTextA
DialogBoxParamA
SetWindowPos
GetSystemMetrics
LoadCursorW
DefWindowProcW
RegisterClassW
SetTimer
BeginPaint

gdi32

DeleteObject
StretchBlt
SelectObject
CreateCompatibleDC
CreateDIBitmap
LineTo
MoveToEx
GetStockObject
DeleteDC

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoCreateInstance
CLSIDFromProgID
CoInitialize
CoUninitialize

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa8efa8121520a18e95fd9dcd49f9185

Headers

File Characteristics

Imports

wininet

netapi32

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 3KB