5b1fcdef54a744c71a98d1ee8438260a

Sharing

Copy URL Twitter E-mail

General

Target

5b1fcdef54a744c71a98d1ee8438260a
Size

468KB
MD5

5b1fcdef54a744c71a98d1ee8438260a
SHA1

4f7d812a8eb0c2cf06648848bdaf5830ffd0e9a2
SHA256

47c8f1ce56ddbe1b2909a4baec19bbd8e39f962f277efada09a4ff602d7bf3b4
SHA512

e2c35e6376f55a081895856b0199285d6bac49d92ae1c85b9130587821ac1d4fdc7147fa40445ad9d7fc59e150d9e9d77f079c00b4b5e2915d8ef70e0496278d
SSDEEP

12288:4chscmpG6hfrwgYBYFNRilP6yCbqZLhrn:4cu8gYBYFnY+mLdn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b1fcdef54a744c71a98d1ee8438260a

Files

5b1fcdef54a744c71a98d1ee8438260a
.exe windows:4 windows x86 arch:x86

e4eca23c35313d10c9cc89f349f68281

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
RaiseException
GetStartupInfoA
HeapAlloc
SetEnvironmentVariableA
SetCurrentDirectoryA
GetSystemTime
GetLocalTime
GetACP
GetTimeZoneInformation
HeapSize
HeapFree
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
RtlUnwind
SetErrorMode
FileTimeToLocalFileTime
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
GetModuleHandleA
GetProcAddress
GetThreadContext
lstrcpyA
ReadProcessMemory
WriteProcessMemory
SetThreadContext
CreateProcessA
MapViewOfFile
CreateEventA
SetCommMask
CloseHandle
WaitCommEvent
ClearCommError
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetCurrentDirectoryA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
LCMapStringA
ReadFile
GetLastError
GetModuleFileNameA
lstrcpynA
GetCurrentThread
lstrcmpA
LCMapStringW
FileTimeToSystemTime
GetOverlappedResult
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
WriteFile
Sleep
GetCommState
SetCommState
CreateFileA
SetupComm
PurgeComm
SetCommTimeouts
CreateThread
CreateFileMappingA
UnmapViewOfFile
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetTickCount
GetVersion
WaitForDebugEvent
ContinueDebugEvent
Beep
VirtualAlloc
IsBadWritePtr
GetVersionExA
OutputDebugStringA
GetProfileStringA

user32

InsertMenuA
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
SetRectEmpty
IsZoomed
CharUpperA
DestroyCursor
SetRect
FillRect
PtInRect
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
WaitMessage
GetWindowThreadProcessId
WindowFromPoint
InflateRect
RedrawWindow
SetCursorPos
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetClassNameA
GetSysColorBrush
LoadStringA
PostQuitMessage
ShowOwnedPopups
GetMenuStringA
DestroyIcon
FindWindowA
GetTabbedTextExtentA
InvertRect
GetDCEx
LockWindowUpdate
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
wvsprintfA
GetSysColor
GetFocus
SetActiveWindow
IsWindow
SetFocus
DrawTextA
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetParent
GetClientRect
GetSystemMetrics
LoadIconA
LoadCursorA
OpenClipboard
SetCapture
KillTimer
SetTimer
EnableScrollBar
IsWindowVisible
LoadBitmapA
ReleaseCapture
GrayStringA
EmptyClipboard
SetClipboardData
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
CloseClipboard
PostMessageA
wsprintfA
MessageBoxA
PeekMessageA
DispatchMessageA
GetWindowRect
SendMessageA
EnableWindow
InvalidateRect
ReleaseDC
GetDC
WinHelpA
GetClassInfoA
GetScrollInfo
HideCaret
ShowCaret
UnregisterClassA
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode

gdi32

Rectangle
GetTextExtentPoint32A
GetTextMetricsA
GetStockObject
CreateFontIndirectA
CreateCompatibleDC
GetDeviceCaps
BitBlt
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
ExtTextOutA
Escape
PatBlt
DPtoLP
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
LPtoDP
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateDIBitmap
DeleteObject
GetTextExtentPointA
TextOutA

comdlg32

PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
ChooseFontA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCreateKeyA
GetFileSecurityA
RegCloseKey
SetFileSecurityA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegDeleteValueA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA

comctl32

ord17

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4eca23c35313d10c9cc89f349f68281

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 320KB - Virtual size: 319KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 20KB - Virtual size: 45KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 320KB - Virtual size: 319KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 20KB - Virtual size: 45KB

.rsrc
Size: 56KB - Virtual size: 55KB