65154df32e9a9202c6a11c6ded993cc6

Sharing

Copy URL Twitter E-mail

General

Target

65154df32e9a9202c6a11c6ded993cc6
Size

96KB
MD5

65154df32e9a9202c6a11c6ded993cc6
SHA1

0af5658bbe5badb32ee1e93ad4bf0e7dceb9c0ce
SHA256

5c17a341b765dfdcd1c2d1d771473238c4a77feeb06a2eb269cdd63d35168e2c
SHA512

816b60f55511b87b24ecc50fd2eac9598a8e7929292183281939abdf631c2d1e5cbf576a32915af8a3ce2a978417a6b4a7a67db592bdcd2c059c7899eab9bb70
SSDEEP

1536:r07Ss4Bpt476akFg2NbWKAAPodIFB5TFND5BsCL:r0Gsy874Fg2NvAAsIhFND5BsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65154df32e9a9202c6a11c6ded993cc6

Files

65154df32e9a9202c6a11c6ded993cc6
.exe windows:5 windows x86 arch:x86

cbe4b59a330f2091a4cae4041fe5ed0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW

kernel32

CreateProcessW
CreateThread
DeleteFileW
FindClose
FindFirstFileW
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceW
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetWindowsDirectoryW
CloseHandle
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
SetCurrentDirectoryW
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW

gdi32

DeleteDC
DeleteObject
ExtTextOutA
ExtTextOutW
GetCharacterPlacementA
GetCharacterPlacementW
GetCurrentObject
CreateCompatibleDC
GetFontLanguageInfo
GetGlyphOutlineA
GetGlyphOutlineW
GetObjectA
GetObjectW
GetOutlineTextMetricsA
CreateDIBSection
GetTextMetricsA
GetTextMetricsW
MoveToEx
CreateFontIndirectA
CreateFontIndirectW
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextAlign
SetTextColor
TranslateCharsetInfo

ntdll

NtClose
NtOpenProcessToken
NtOpenThreadToken
NtSetInformationThread
RtlConvertSidToUnicodeString

user32

DefWindowProcW
DeleteMenu
BringWindowToTop
DestroyIcon
DestroyWindow
DrawFocusRect
EnableMenuItem
EnableWindow
ExitWindowsEx
FlashWindow
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClientRect
CallNextHookEx
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetFocus
GetIconInfo
GetKeyState
GetMenu
GetMenuItemCount
GetMenuItemID
GetMonitorInfoW
GetNextDlgGroupItem
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InvalidateRect
InvalidateRgn
IsCharAlphaNumericW
IsCharAlphaW
IsIconic
IsWindow
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
LockSetForegroundWindow
MapDialogRect
MessageBoxW
MonitorFromWindow
PeekMessageW
PostMessageW
PostQuitMessage
ReleaseDC
RemoveMenu
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetClassLongW
SetCursor
ChildWindowFromPoint
SetParent
SetTimer
ClientToScreen
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
WindowFromPoint
wsprintfW
wvsprintfW
CopyRect
CreateDialogParamW
CreateIconFromResource
AppendMenuW
CreateIconIndirect

ole32

CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoImpersonateClient
CoInitializeEx
CoInitializeSecurity
CoRegisterClassObject
CoRevertToSelf
CoRevokeClassObject
CoSetProxyBlanket
CoSuspendClassObjects
CoTaskMemAlloc

shell32

ShellExecuteW

comdlg32

GetSaveFileNameA
PrintDlgA
ReplaceTextA
CommDlgExtendedError
FindTextA
GetFileTitleA
GetOpenFileNameA

Sections

.text
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cbe4b59a330f2091a4cae4041fe5ed0c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

ntdll

user32

ole32

shell32

comdlg32

Sections

.text Size: 4KB - Virtual size: 796B

.rdata Size: 4KB - Virtual size: 482B

.data Size: 72KB - Virtual size: 72KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 4KB - Virtual size: 796B

.rdata
Size: 4KB - Virtual size: 482B

.data
Size: 72KB - Virtual size: 72KB

.rsrc
Size: 12KB - Virtual size: 12KB