59cf491cc8b5d542cba2ab18d693363e

Sharing

Copy URL

Twitter E-mail

General

Target

59cf491cc8b5d542cba2ab18d693363e
Size

2.1MB
MD5

59cf491cc8b5d542cba2ab18d693363e
SHA1

a66fbab04075ceb5aa9c7279f0ee4726196d43f9
SHA256

9d75c1c8892a125508b008ee16504752930aa5815f0b6f175fa39f107e5b0210
SHA512

d3673f6c2b6cbad903f2052527d07ed7510be41a429996580bbb592218cc0d6ceeafbd2591f9322fe7f2efd8957fca070c68d7de14be7d14613a419fa1635167
SSDEEP

49152:MkdOIP032RfXFjFOJ9jd5EzjO/tCJhB2E+IKfAbEwfEtVF:MtH+FOJqzqK2BIkmEwfE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59cf491cc8b5d542cba2ab18d693363e

Files

59cf491cc8b5d542cba2ab18d693363e
.exe windows:4 windows x86 arch:x86

5dc51aa5dd54807d27b675c34c0f48a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

ole32

SetConvertStg
CoTaskMemAlloc

wininet

FtpCreateDirectoryA

shell32

ExtractIconW
ShellExecuteW

rpcrt4

RpcBindingFree
UuidCreate
RpcStringFreeA
RpcStringBindingComposeA

kernel32

GetFileSize
LeaveCriticalSection
lstrcmpA
FindNextFileW
VirtualAlloc
GlobalAddAtomW
WideCharToMultiByte
GlobalGetAtomNameW
FreeResource
LocalFileTimeToFileTime
GetLocaleInfoW
GetCurrentThread
GetShortPathNameW
lstrlenW
CompareStringA
ConvertDefaultLocale
CreateFileW
InterlockedIncrement
GetProcessHeap
InterlockedDecrement
SetFilePointer
ResumeThread
GetFileAttributesW
GetUserDefaultLCID
GlobalFindAtomW
FlushFileBuffers
EnterCriticalSection
GlobalFree
InitializeCriticalSection
CreateProcessW
SystemTimeToFileTime
GetModuleFileNameW
FindClose
GetModuleHandleA
TlsFree
CopyFileW
DuplicateHandle
GlobalFlags
FormatMessageW
GetCurrentThreadId
FileTimeToSystemTime
GetFileTime
lstrcmpiW
GlobalLock
LoadLibraryA
SetErrorMode
MoveFileW
GetThreadLocale
GetVersionExW
GlobalAlloc
CreateEventW
TlsSetValue
UnlockFile
GlobalHandle
GetSystemInfo
FindResourceW
GlobalSize
Sleep
SetEndOfFile
TlsGetValue
WriteFile
DeleteFileW
SuspendThread
WaitForSingleObject
FindFirstFileW
GlobalDeleteAtom
lstrcmpW
LoadResource
SetThreadPriority
GetAtomNameW
LockResource
lstrlenA
GlobalReAlloc
CompareStringW
MulDiv
CloseHandle
ResetEvent
SizeofResource
HeapReAlloc
GetLastError
GetVersion
InterlockedExchange
GetVolumeInformationW
GetStringTypeExW
LockFile
EnumResourceLanguagesW
GetCurrentProcessId
SetFileTime
ReadFile
DeleteCriticalSection
LocalReAlloc
GetFileAttributesA
lstrcpyA
GetVersionExA
HeapAlloc
HeapFree
GetPrivateProfileIntW
SetFileAttributesW
GetCurrentProcess
SetLastError

user32

GetMenu
SetScrollPos
GetWindowRect
GetSystemMetrics
GetWindowDC
SetWindowPos
ScrollWindowEx
EndDeferWindowPos
SystemParametersInfoW
GetMessageTime
GetForegroundWindow
CheckDlgButton
GetMenuStringW
LoadMenuW
GetDlgItem

advapi32

SystemFunction041
RegEnumValueW
CryptEncrypt
RegConnectRegistryW
OpenThreadToken
UnlockServiceDatabase
RegDeleteValueA
GetSidSubAuthorityCount
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegEnumKeyExW
RegQueryValueExW
SetSecurityDescriptorGroup
RegGetKeySecurity
CryptSetKeyParam
SetSecurityDescriptorSacl

ws2_32

WSAGetLastError

comdlg32

PrintDlgA
GetOpenFileNameA

Sections

.rsrc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 12.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5dc51aa5dd54807d27b675c34c0f48a3

Headers

File Characteristics

Imports

ole32

wininet

shell32

rpcrt4

kernel32

user32

advapi32

ws2_32

comdlg32

Sections

.rsrc Size: 122KB - Virtual size: 122KB

.data Size: 64KB - Virtual size: 12.6MB

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 85KB - Virtual size: 85KB

.tls Size: 512B - Virtual size: 4KB

.rsrc
Size: 122KB - Virtual size: 122KB

.data
Size: 64KB - Virtual size: 12.6MB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 85KB - Virtual size: 85KB

.tls
Size: 512B - Virtual size: 4KB