728242047c530c74e78a1a2fa0eed6cd

Sharing

Copy URL Twitter E-mail

General

Target

728242047c530c74e78a1a2fa0eed6cd
Size

100KB
MD5

728242047c530c74e78a1a2fa0eed6cd
SHA1

c4b17ce11233fb260bd0a4de43097590ed9d6ee5
SHA256

bd12ab313f5da849ac160260b0f9e9015b66a66eb8b8553ce62224d330093b42
SHA512

30572a14cee267045edf6f7e7f2551e30a35d9bab7306839bf58f56bad9d979464530ff1df4373cc0db850a8a8d747f809c32df69a81c366393b31ca30228d4b
SSDEEP

1536:TkgxXavyDj3JPToe3zBLViUJw+kwty9pJxo+7Z:Tkg4KXpH/w+kwty9pJxo+7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
728242047c530c74e78a1a2fa0eed6cd

Files

728242047c530c74e78a1a2fa0eed6cd
.dll windows:4 windows x86 arch:x86

3e3ad8b78843c0097b43243c6aa2b0b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

UnhookWinEvent
GetMessageA
TranslateMessage
DispatchMessageA
RegisterWindowMessageA
SetWinEventHook
GetCursorPos
keybd_event
IsIconic
GetForegroundWindow
IsChild
IsWindowEnabled
GetKeyState
MapVirtualKeyA
VkKeyScanA
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
SetWindowPos
GetWindowRect
ShowWindow
SetForegroundWindow
SendMessageTimeoutA
GetParent
SystemParametersInfoA
FindWindowA
IsWindow
GetWindow
GetClassNameA
GetAncestor
PostMessageA
GetWindowThreadProcessId
IsWindowVisible
GetWindowTextA
GetDesktopWindow

advapi32

RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
GetUserNameA
RegQueryValueA
RegQueryInfoKeyA

kernel32

InitializeCriticalSection
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetVersion
GetCommandLineA
GetCurrentProcess
ExitProcess
ExitThread
DeleteCriticalSection
TlsSetValue
CreateThread
ResumeThread
LeaveCriticalSection
EnterCriticalSection
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
TlsGetValue
SetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetLastError
FreeLibrary
ReleaseMutex
CreateDirectoryA
GetTickCount
GetCurrentProcessId
GetLongPathNameA
GetDiskFreeSpaceExA
GetDriveTypeA
GlobalMemoryStatus
GetVersionExA
GetWindowsDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryA
CreateProcessA
CloseHandle
TerminateProcess
OpenProcess
GetExitCodeProcess
WaitForSingleObject
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
CreateMutexA
GetCurrentThreadId
Sleep
MapViewOfFile
CreateFileMappingA
CompareStringW
CompareStringA
GetOEMCP
TlsAlloc
TlsFree
SetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
SetStdHandle
GetEnvironmentStrings
FlushFileBuffers
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
WriteFile
GetEnvironmentStringsW
GetStartupInfoA

ws2_32

inet_ntoa
gethostbyname
WSAStartup

oleacc

WindowFromAccessibleObject
AccessibleObjectFromWindow
GetStateTextA
GetRoleTextA
AccessibleObjectFromEvent
ObjectFromLresult

wininet

InternetGetConnectedState
InternetSetCookieA
InternetSetOptionA
InternetCheckConnectionA
InternetCloseHandle
HttpOpenRequestA
InternetReadFile
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetGetCookieA

ole32

CLSIDFromString
IIDFromString
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

VariantInit
VariantClear
SafeArrayCreateVector
SafeArrayGetLBound
SysAllocString
SafeArrayGetUBound
SysFreeString
SafeArrayAccessData
SafeArrayUnaccessData

shell32

ShellExecuteA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

webmerebates

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e3ad8b78843c0097b43243c6aa2b0b7

Headers

File Characteristics

Imports

user32

advapi32

kernel32

ws2_32

oleacc

wininet

ole32

oleaut32

shell32

version

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 164KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 164KB

.reloc
Size: 8KB - Virtual size: 6KB