90ab18d69c8c28f797acf90b61d656df[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

90ab18d69c8c28f797acf90b61d656df.exe
Size

313KB
MD5

90ab18d69c8c28f797acf90b61d656df
SHA1

766234b73a93b9b28169b5d51f9870faf983d503
SHA256

909e4623b8a2fcc82c150fd92a7d85bfdd7d506ec8b8dbf7655ada67885e0417
SHA512

0aa3a30e07b34ac31120f4dead5fa83564dadd75ecfcaf83cd8a7a7f60ec9f27b8d8c500dc82454e6e5205decfaaf904a813a8b57eff4067acb17d354f5c13a8
SSDEEP

3072:oVZTMYQ0qIN6NtVcOXHK5ULK2NUPj0ZeyRS6CSfKVu1xgCAWU8fvJqxEm4x1ESuS:YMnt3HP2PPjqp/1fvoxEvTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90ab18d69c8c28f797acf90b61d656df.exe

Files

90ab18d69c8c28f797acf90b61d656df.exe
.exe windows:6 windows x64 arch:x64

a7a19cad0c2c193feb43fc00c1b6b502

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
LocalFree
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateMutexW
GetTickCount64
VerifyVersionInfoW
VerSetConditionMask
MulDiv
CloseHandle
GetCurrentProcessId

gdi32

Polyline
SetBkColor
CreateSolidBrush
CreatePen
DeleteObject
GetDeviceCaps
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
SelectObject
GdiAlphaBlend
BitBlt
DeleteDC
GetStockObject
GdiSetBatchLimit
SetTextColor
GetTextMetricsW
PatBlt
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
EnumDisplayDevicesW
ChangeDisplaySettingsExW
GetSysColor
CopyImage
LoadBitmapW
DestroyWindow
CreateWindowExW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
IsCharAlphaNumericW
MessageBoxW
SystemParametersInfoW
SetFocus
SetWindowLongW
GetParent
PostMessageW
EnableWindow
ShowWindow
DialogBoxParamW
KillTimer
SetTimer
EndDialog
SetForegroundWindow
FindWindowW
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowTextW
SendMessageW
EndPaint
GetSysColorBrush
FrameRect
BeginPaint
DrawFocusRect
GetWindowLongW
GetFocus
InvalidateRect
SetWindowLongPtrW
SetDlgItemTextW
GetDlgItem
GetClientRect
MapDialogRect
SendDlgItemMessageW
SendMessageTimeoutW
SetWindowPos
PtInRect
GetWindowRect
GetSystemMetrics
GetProcessDefaultLayout
ReleaseDC
LoadStringW
GetDC
GetWindowLongPtrW
TrackMouseEvent

msvcrt

_wtoi
__set_app_type
_fmode
memcpy
__setusermatherr
_amsg_exit
_initterm
memset
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_commode
_acmdln
exit
_cexit
memcmp
_vsnwprintf
_purecall
free
realloc
wcschr
??0exception@@QEAA@AEBQEBDH@Z
?what@exception@@UEBAPEBDXZ
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_callnewh
malloc
_CxxThrowException
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW

uxtheme

CloseThemeData
GetThemeSysFont
GetThemeSysColor
GetThemeColor
GetThemeFont
OpenThemeData
IsThemeActive
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
StringFromGUID2
CoGetObject
CoCreateInstance

oleaut32

SafeArrayGetLBound
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetElement
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 235KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7a19cad0c2c193feb43fc00c1b6b502

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 235KB - Virtual size: 236KB

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 235KB - Virtual size: 236KB

.reloc
Size: 1024B - Virtual size: 1024B