70c49bfd6753ed567cc8d4d3e6263078

Sharing

Copy URL Twitter E-mail

General

Target

70c49bfd6753ed567cc8d4d3e6263078
Size

740KB
MD5

70c49bfd6753ed567cc8d4d3e6263078
SHA1

208c509e237ed9bd7bec266494083e7a89e09531
SHA256

b7d9ecffb067bb885f1457b70ff813174480cb057ac0deabdfce9ad17d7c2597
SHA512

404745894fd4b6f938b519c0b4f3aa6a1db75d3f97734ede5fbca0d6ff5ca39d1ba4c63a8450fea1553d217f4f9a8fbb1efefeb4c5b944bf9dfc3f65a62a5d24
SSDEEP

12288:FY+Dg21CPbG4YsHdjkgskomJsFvqRRCwhNx:FYAg21f4jdtOmeFvqRRCwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70c49bfd6753ed567cc8d4d3e6263078

Files

70c49bfd6753ed567cc8d4d3e6263078
.exe windows:4 windows x86 arch:x86

7e5d92c195591245b1657b681ba47f97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupFindFirstLineA
SetupDefaultQueueCallbackA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

waveOutClose
waveOutOpen

shell32

ShellExecuteExA
ord680
ShellExecuteA

crypt32

CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertOpenStore
CertCompareCertificate
CertFreeCertificateContext
CertCloseStore

kernel32

DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileSize
GetFileTime
GetCurrentThread
SetErrorMode
GetCurrentDirectoryA
RtlUnwind
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
CreateThread
ExitThread
SetStdHandle
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetACP
MoveFileA
GlobalGetAtomNameA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
GetLocaleInfoW
SetEnvironmentVariableA
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
CreateEventA
WaitForSingleObject
CreateSemaphoreA
GetModuleFileNameA
GetLastError
CreateDirectoryA
lstrcpyA
lstrcatA
FindFirstFileA
FindNextFileA
GetVolumeInformationA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
ReadFile
GetCurrentProcess
SuspendThread
lstrcpynA
MulDiv
GetCurrentThreadId
SetThreadPriority
ResumeThread
CompareStringA
CompareStringW
lstrcmpiA
FindClose
DeleteFileA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
LockResource
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
DeviceIoControl
GetExitCodeProcess
GlobalFree
WaitForMultipleObjects
SetLastError
CreateToolhelp32Snapshot
Process32First
Process32Next
WritePrivateProfileStringA
FormatMessageA
GetProcessHeap
HeapAlloc
HeapFree
FindResourceA
SizeofResource
LoadResource
GetFullPathNameA
GetCommState
SetCommState
SetCommTimeouts
SetupComm
EscapeCommFunction
CreateFileA
GetTempPathA
GetCurrentProcessId
GlobalAlloc
OpenEventA
SetEvent
lstrlenA
LocalAlloc
LocalFree
OpenProcess
TerminateProcess
GetVersionExA
CreateProcessA
CloseHandle
GetVersion
MoveFileExA
GetShortPathNameA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
CopyFileA
GetFileAttributesExA
SetFileAttributesA
GetSystemDirectoryA
lstrcmpA
LCMapStringA
GetFileType
RemoveDirectoryA

user32

ValidateRect
TranslateMessage
GetMessageA
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
PostQuitMessage
SetCursor
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
GetMenuCheckMarkDimensions
GetCursorPos
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
LoadBitmapA
CheckMenuItem
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowTextA
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetWindowRect
LoadIconA
ShowWindow
GetSystemMetrics
SetWindowPos
MessageBoxA
KillTimer
SetTimer
InvalidateRect
InflateRect
IsRectEmpty
GetClientRect
GetSysColor
GetWindowThreadProcessId
wsprintfA
LoadStringA
EnumWindows
GetWindowTextA
GetFocus
SetFocus
SendMessageA
IsWindow
EnableWindow
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetClassInfoA
IsDialogMessageA
GetCapture
WinHelpA
GetMessagePos
EndDialog
GetNextDlgTabItem
SetWindowLongA
UnregisterClassA

gdi32

BitBlt
CreateCompatibleDC
CreateSolidBrush
CreatePen
Rectangle
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
GetViewportExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetMapMode
GetWindowExtEx
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

SetSecurityDescriptorDacl
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryInfoKeyA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
QueryServiceStatus
ControlService
RegSetKeySecurity
FreeSid
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle

comctl32

ord17

olepro32

ord251

Sections

.text
Size: 480KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7e5d92c195591245b1657b681ba47f97

Headers

File Characteristics

Imports

setupapi

version

winmm

shell32

crypt32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

olepro32

Sections

.text Size: 480KB - Virtual size: 476KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 56KB - Virtual size: 68KB

.rsrc Size: 140KB - Virtual size: 140KB

.text
Size: 480KB - Virtual size: 476KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 56KB - Virtual size: 68KB

.rsrc
Size: 140KB - Virtual size: 140KB