524c8b8c44caabdddf8038f1c83bfad6

Sharing

Copy URL

Twitter E-mail

General

Target

524c8b8c44caabdddf8038f1c83bfad6
Size

805KB
MD5

524c8b8c44caabdddf8038f1c83bfad6
SHA1

409bcd6b52c705e58c53dc4c30c9287563354316
SHA256

0277d93a9c3d5c43511a2304c3b59861b7d5d97e34fa7a9c3d657bea2edc5dd6
SHA512

e1959707c8f32cef9f2f0ee8a182fe2ff4e36948eca0423abadcf38ab024c12f84c52d66439742aa4477fa8ce5ae05e69a5a9722d0df62f23714370f0cb7d948
SSDEEP

12288:LxQBUrWOaCtI0tjaPeB1bNjH6EoVbsj4f24zykgxq:lJjIcWPw6E8QNej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
524c8b8c44caabdddf8038f1c83bfad6

Files

524c8b8c44caabdddf8038f1c83bfad6
.exe windows:5 windows x86 arch:x86

fbd00a2ae5aea72e66f6617e9bbd78bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleHandleW
LocalFree
FreeLibrary
InitializeCriticalSection
LeaveCriticalSection
GetVersionExA
HeapFree
LocalFree
GetVersionExA
LeaveCriticalSection
DisableThreadLibraryCalls
InterlockedCompareExchange
ReadFile
GetCurrentProcessId
HeapDestroy
CreateFileW
LeaveCriticalSection
FreeLibrary
GetCurrentProcess
Sleep
HeapAlloc
SetLastError
GetProcessHeap
GetSystemTimeAsFileTime
GetProcAddress
ReadFile
GetModuleHandleA
UnhandledExceptionFilter
lstrlenA
GetProcessHeap
lstrlenA
HeapFree
UnhandledExceptionFilter
SetLastError
DisableThreadLibraryCalls
GetVersionExA
InitializeCriticalSection
InterlockedExchange
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
InterlockedDecrement
GetModuleFileNameA
CreateThread
HeapDestroy
LoadLibraryW
CreateFileW
LoadLibraryA
GetCurrentProcess
GetModuleFileNameW
CreateThread
FreeLibrary
GetCurrentProcessId
LocalAlloc
LoadLibraryW
CreateThread
LoadLibraryA
GetModuleFileNameA
LocalAlloc
VirtualAlloc
LeaveCriticalSection
lstrcmpiW
DeleteCriticalSection
QueryPerformanceCounter
VirtualProtect
DisableThreadLibraryCalls
CreateThread
GetModuleHandleA
CloseHandle
GetModuleFileNameW
lstrcmpiW
LocalAlloc
lstrcmpiW
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
LoadLibraryW
HeapDestroy
LoadLibraryA
ReadFile
HeapFree
UnhandledExceptionFilter
lstrlenA

user32

SendMessageW
GetParent
GetParent
GetClientRect
PostMessageW
CreateWindowExW
LoadStringW
KillTimer
GetFocus
LoadIconW
BeginPaint
KillTimer
SetFocus
GetWindowRect
SetFocus
SetForegroundWindow
EndDialog
SetWindowPos
SetCursor
TranslateMessage
PostMessageW
BeginPaint
BeginPaint
BeginPaint
PostQuitMessage
ShowWindow
GetFocus
SetWindowLongW
LoadIconW
wsprintfA
ShowWindow
LoadStringW
SendDlgItemMessageW
SetForegroundWindow
DialogBoxParamW
DefWindowProcW
CharNextW
GetSystemMetrics
GetSysColor
DefWindowProcW
DefWindowProcW
SetFocus
PeekMessageW
EndPaint
DestroyWindow
SendMessageW
GetDC
SetFocus
BeginPaint
DefWindowProcW
SetForegroundWindow
GetDesktopWindow
TranslateMessage
IsDlgButtonChecked
PostMessageW
KillTimer
IsDlgButtonChecked
SendDlgItemMessageW
SetCursor
DialogBoxParamW
GetWindowRect
CreateWindowExW
SetForegroundWindow
DispatchMessageW
PostMessageW
GetWindowLongW
GetWindowLongW
TranslateMessage
GetWindowLongW
ShowWindow
KillTimer
DestroyWindow
GetSystemMetrics
PostMessageW
PeekMessageW
SetWindowTextW
GetClientRect
LoadCursorW
SetDlgItemTextW
DefWindowProcW
DestroyWindow

Sections

.text
Size: 718KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbd00a2ae5aea72e66f6617e9bbd78bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 718KB - Virtual size: 968KB

.data Size: - Virtual size: 4KB

.adata Size: - Virtual size: 4KB

.idata Size: - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 8KB

.pdata Size: - Virtual size: 4KB

.pdata Size: - Virtual size: 4KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 718KB - Virtual size: 968KB

.data
Size: - Virtual size: 4KB

.adata
Size: - Virtual size: 4KB

.idata
Size: - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 8KB

.pdata
Size: - Virtual size: 4KB

.pdata
Size: - Virtual size: 4KB

.rsrc
Size: 82KB - Virtual size: 84KB