5720850ca56353f20e8e69821fe14d02

Sharing

Copy URL Twitter E-mail

General

Target

5720850ca56353f20e8e69821fe14d02
Size

328KB
MD5

5720850ca56353f20e8e69821fe14d02
SHA1

1757e6825955189ff3282b496dc8b26426d3f490
SHA256

52f1bc661ab50537690f37b0234e5737b4b5ef2cbccb569380ca1f70da6fc096
SHA512

58f28150fdb796c6e1a797c09d8438c3ea67a5d6fca59490ae98539372eccddbf081b140cbe2821d382e35d787eefbd1ab38e675bb76c59d7358b61c2695f6d3
SSDEEP

6144:DFrDIbYxL9iffY9kRQWeHGGKmM/zY2BwS2zKWWMhZ:DFrDIbYxQnYRHG8M/zY2BwS2zP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5720850ca56353f20e8e69821fe14d02

Files

5720850ca56353f20e8e69821fe14d02
.exe windows:4 windows x86 arch:x86

64a4b7fb536f94551cc29733669a9104

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetEnvironmentStringsW
GetStartupInfoW
GetProcAddress
Sleep
InterlockedIncrement
GetTimeFormatA
TerminateProcess
LeaveCriticalSection
GetCurrentThreadId
GetTimeZoneInformation
IsDebuggerPresent
VirtualFree
GetStringTypeW
UnhandledExceptionFilter
CloseHandle
WideCharToMultiByte
GetCPInfo
SetHandleCount
GetLocaleInfoA
GetModuleFileNameA
RtlUnwind
LoadLibraryW
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetCommandLineW
GetFileType
GetLastError
LoadLibraryA
DeleteCriticalSection
GetDateFormatA
VirtualAlloc
GetModuleHandleW
FlushFileBuffers
InterlockedExchange
SetUnhandledExceptionFilter
HeapAlloc
HeapFree
FreeEnvironmentStringsW
LCMapStringW
TlsSetValue
RaiseException
MultiByteToWideChar
GetACP
TlsGetValue
HeapCreate
GetOEMCP
EnterCriticalSection
WriteFile
TlsFree
GetConsoleMode
SetLastError
HeapSize
GetCurrentProcessId
CompareStringA
GetModuleHandleA
GetTickCount
CompareStringW
TlsAlloc
GetConsoleOutputCP
GetStringTypeA
InitializeCriticalSection
WriteConsoleW
ExitProcess
CreateFileA
WriteConsoleA
GetStartupInfoA
VirtualQuery
SetStdHandle
GetModuleFileNameW
QueryPerformanceCounter
LCMapStringA
CreateMutexW
InterlockedDecrement
ReadFile
GetSystemTimeAsFileTime
HeapReAlloc
SetEnvironmentVariableA
GetCurrentProcess
IsValidCodePage

winspool.drv

DocumentPropertiesA
ClosePrinter
ord204

shlwapi

StrFormatByteSizeW
PathIsDirectoryW
PathCombineW
PathRemoveFileSpecW
PathAddBackslashW
PathIsFileSpecW
StrStrIW
PathFindFileNameW
PathFindExtensionW
PathRelativePathToW
PathFileExistsW
PathRemoveBackslashW
PathIsRootW
PathCanonicalizeW

ole32

OleUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CoRevokeClassObject
CLSIDFromString
CreateBindCtx
StringFromGUID2
OleGetClipboard
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
OleSetClipboard
CreateStreamOnHGlobal
CoInitialize
CoDisconnectObject

oleaut32

LoadTypeLi

comctl32

ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
InitCommonControlsEx
ImageList_Create
_TrackMouseEvent
DestroyPropertySheetPage
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_DrawEx

gdi32

CreatePenIndirect
PlayMetaFile
ExtFloodFill
GetRegionData
GetStretchBltMode
GetPaletteEntries
SetTextColor
CreateEllipticRgn
SetTextAlign
CreateFontA
SetBrushOrgEx
CreateBrushIndirect
DPtoLP
MaskBlt
GetCharABCWidthsA
Arc
GetClipBox
SetArcDirection
PolylineTo
GetTextAlign
GetTextColor
StartDocA
DeleteMetaFile
RectInRegion
Ellipse
Pie
GetBitmapDimensionEx
GetNearestPaletteIndex
GetFontData
GetROP2
SetAbortProc
ScaleViewportExtEx
CreateEnhMetaFileA
CreatePen
OffsetViewportOrgEx
GetOutlineTextMetricsA
Polygon
SetWindowExtEx
SetTextJustification
SelectClipRgn
Rectangle
CreateHatchBrush
SetTextCharacterExtra
CopyMetaFileA
SelectClipPath
CreatePolygonRgn
GetCharWidthA
GetPolyFillMode
GetMapMode
GetWindowOrgEx
GetViewportExtEx
SetPixelV
RoundRect
UnrealizeObject
StretchDIBits
ExtTextOutA
BeginPath
GetArcDirection
PaintRgn
MoveToEx
CloseFigure
GetObjectType
LineTo
SetBkMode
CreateHalftonePalette
ExcludeClipRect
CreateCompatibleBitmap
SelectObject
GetPixel
RealizePalette
SetROP2
SetWindowOrgEx
CloseEnhMetaFile
StrokeAndFillPath
GetRgnBox
CreatePatternBrush
ScaleWindowExtEx
BitBlt
GetTextFaceA
CreateBitmapIndirect
ExtSelectClipRgn
FlattenPath
PolyPolygon
EqualRgn
GetTextExtentPointA
CreateBitmap
SetBitmapDimensionEx
GetDeviceCaps
GetWindowExtEx
GetTextExtentPoint32A
ResetDCA
FrameRgn
SetPaletteEntries
SetMapMode
SetStretchBltMode
CreateRectRgn
CreateSolidBrush
SetRectRgn
PatBlt
GetPath
ExtCreatePen
SetBoundsRect
PolyBezierTo
GetCurrentPositionEx
OffsetClipRgn
CreateRoundRectRgn
FillRgn
CreateRectRgnIndirect
ExtCreateRegion
EndPath
Polyline
GetStockObject
LPtoDP
GetClipRgn
GetBoundsRect
TextOutA
GetBitmapBits
PtInRegion
DeleteDC
SetBitmapBits
PlayEnhMetaFile
GetBkColor
CreateEllipticRgnIndirect
UpdateColors

advapi32

AdjustTokenPrivileges
OpenSCManagerA
CloseServiceHandle
RegQueryValueExA
RegEnumValueA
OpenProcessToken
ControlService
RegOpenKeyExA
RegEnumKeyExA
RegOpenKeyA
RegFlushKey
RegEnumKeyA

user32

BeginDeferWindowPos
SetCapture
GetMessageW
PtInRect
CreatePopupMenu
LoadIconW
GetSysColorBrush
GetSystemMenu
DestroyWindow
ShowWindow
DefWindowProcW
GetSystemMetrics
LoadAcceleratorsW
CreateWindowExW
RedrawWindow
GetFocus
EndDeferWindowPos
RegisterClassExW
MessageBoxW
DestroyAcceleratorTable
LoadCursorW
GetDesktopWindow
LoadStringW
IsWindowEnabled
RegisterClassW

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64a4b7fb536f94551cc29733669a9104

Headers

File Characteristics

Imports

kernel32

winspool.drv

shlwapi

ole32

oleaut32

comctl32

gdi32

advapi32

user32

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 52KB - Virtual size: 60KB

.rsrc Size: 92KB - Virtual size: 91KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 52KB - Virtual size: 60KB

.rsrc
Size: 92KB - Virtual size: 91KB