72a45f2dc8befb8326c3f6bcdf0809da

Sharing

Copy URL Twitter E-mail

General

Target

72a45f2dc8befb8326c3f6bcdf0809da
Size

619KB
MD5

72a45f2dc8befb8326c3f6bcdf0809da
SHA1

6a20103d4e43af9dee940a66542c982159ba6778
SHA256

97b1623e99df736e0f2f7ae9aa7f3439e87dcf275e63f59cad8b01d3ef1041cd
SHA512

af5694dcf258e606f5cbcb0565788fa8c7bee769d4e0348634ac8fee169fce6d165ffc7a5894f58d70e0c6d1fee7a10ae1dec063f352f31d659db0ca2532a0a1
SSDEEP

6144:8hId0IN+M0SMyj0V52Iqmw2/UndckP/NS1c/EJ3vsUTsWGpRTZx6ITSmpq94azxJ:qvGML/sTU1pJ3xTsWGplZx6IWDrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72a45f2dc8befb8326c3f6bcdf0809da

Files

72a45f2dc8befb8326c3f6bcdf0809da
.exe windows:5 windows x86 arch:x86

fa0b51b475a5b4b119b5a21f5c13d1e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSAStartup

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetStatusCallback
HttpQueryInfoA
InternetCrackUrlA
InternetReadFile

comctl32

ord412
ord410
ord413

psapi

EnumProcesses
GetModuleFileNameExA
GetModuleInformation
EnumProcessModules

kernel32

GetCurrentProcessId
IsBadWritePtr
IsBadStringPtrA
LoadLibraryA
CreateFileA
GetCurrentThreadId
GetCurrentProcess
FreeLibrary
RaiseException
IsDebuggerPresent
OutputDebugStringA
GetCommandLineA
QueryPerformanceFrequency
QueryPerformanceCounter
CreateThread
Sleep
WaitForSingleObject
CreateEventA
SetEvent
CreateProcessA
ReleaseMutex
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetExitCodeThread
TerminateThread
FindFirstFileW
FindClose
FindNextFileW
GetFileAttributesW
SetFileAttributesW
FormatMessageA
GetModuleHandleExA
VirtualQuery
VirtualProtect
FlushInstructionCache
GetSystemWindowsDirectoryA
TerminateProcess
GetVersion
GetVersionExA
SetCurrentDirectoryA
GetLongPathNameA
SetEnvironmentVariableA
GetUserDefaultUILanguage
GetCurrentDirectoryA
GetModuleFileNameA
OutputDebugStringW
CloseHandle
OpenProcess
SetLastError
GetLastError
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
DeleteFileA
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleW
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateMutexA

user32

TranslateMessage
DispatchMessageA
SetDlgItemTextW
SendDlgItemMessageA
GetDlgItem
SetWindowLongA
GetWindowLongA
DestroyWindow
GetDlgCtrlID
DrawTextW
ReleaseDC
PostQuitMessage
OffsetRect
SetWindowRgn
DrawIconEx
IsIconic
SetForegroundWindow
RegisterClassExA
LoadCursorA
LoadIconA
IsDialogMessageA
LoadStringA
SetRect
PtInRect
LoadBitmapA
DefWindowProcA
EndPaint
FillRect
BeginPaint
GetClientRect
DialogBoxParamA
EnumWindows
GetWindowThreadProcessId
IsWindowVisible
GetDlgItemInt
EndDialog
SetWindowPos
GetDesktopWindow
GetWindowRect
SetDlgItemInt
SetDlgItemTextA
PostMessageA
FindWindowA
wsprintfA
PeekMessageA
SendMessageA
UpdateWindow
ShowWindow
GetWindowDC
GetSystemMetrics
GetWindowLongW
CreateDialogParamA
MessageBoxA

gdi32

SelectObject
BitBlt
CreateBitmap
CreateSolidBrush
CreateFontA
SetMapMode
SetTextAlign
DeleteDC
ExcludeClipRect
CreateRoundRectRgn
SelectClipRgn
CreateCompatibleBitmap
CreateCompatibleDC
SetTextColor
GetObjectA
SetBkMode
SetBkColor
DeleteObject
ExtTextOutA

advapi32

RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyA

ole32

CoCreateInstance

shlwapi

SHDeleteKeyA

vcruntime140

memcpy
__CxxFrameHandler3
_CxxThrowException
__std_terminate
memmove
_purecall
strrchr
strstr
strchr
memset
_except_handler4_common
__std_exception_copy
__std_exception_destroy

api-ms-win-crt-stdio-l1-1-0

_fileno
_setmode
__stdio_common_vfprintf
fgets
__acrt_iob_func
__p__commode
fgetc
fread
__stdio_common_vsprintf
fseek
ftell
feof
fclose
fwrite
__stdio_common_vswprintf
fopen
_getcwd
ferror
fflush
_set_fmode
ungetc

api-ms-win-crt-string-l1-1-0

_stricmp
strncat
strnlen
isdigit
strncpy
tolower
isspace
_strnicmp

api-ms-win-crt-filesystem-l1-1-0

_mkdir
rename
_unlink
_chdir
_findclose
_findfirst64i32
_stat64i32

api-ms-win-crt-convert-l1-1-0

strtol
_i64toa
strtoul
strtod
atoi
_itoa
atof

api-ms-win-crt-time-l1-1-0

strftime
_time64
_localtime64

api-ms-win-crt-process-l1-1-0

_spawnv

api-ms-win-crt-multibyte-l1-1-0

_mbsnbcpy

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_seh_filter_exe
_crt_atexit
_register_onexit_function
_get_narrow_winmain_command_line
_initterm
_initialize_onexit_table
exit
_initterm_e
_initialize_narrow_environment
_controlfp_s
terminate
_configure_narrow_argv
_cexit
_register_thread_local_exe_atexit_callback
_exit
_c_exit

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
free
realloc
malloc

api-ms-win-crt-math-l1-1-0

_except1
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

CreateInstance

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa0b51b475a5b4b119b5a21f5c13d1e6

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wininet

comctl32

psapi

kernel32

user32

gdi32

advapi32

ole32

shlwapi

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-process-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 135KB

.rdata Size: 330KB - Virtual size: 330KB

.data Size: 3KB - Virtual size: 57KB

.gfids Size: 512B - Virtual size: 80B

.rsrc Size: 141KB - Virtual size: 140KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 135KB - Virtual size: 135KB

.rdata
Size: 330KB - Virtual size: 330KB

.data
Size: 3KB - Virtual size: 57KB

.gfids
Size: 512B - Virtual size: 80B

.rsrc
Size: 141KB - Virtual size: 140KB

.reloc
Size: 7KB - Virtual size: 7KB