736acf541cd45407cd6f9153b38fd9cb

Sharing

Copy URL Twitter E-mail

General

Target

736acf541cd45407cd6f9153b38fd9cb
Size

168KB
MD5

736acf541cd45407cd6f9153b38fd9cb
SHA1

925002d259ac2519d1311809dbffd7158b0265b4
SHA256

c52688f986ff59f4df4f3ce45a70057ec7558aa421debd0e5168f4c17afc84ea
SHA512

1fee39122c70ec9fa18ac1f249eb34e7ad5900015e72474be0a8e38bfe15e38b72ae1906110aed1214ffdc56b6ff7048580d0e115ba64457ee321e5ac5e127f7
SSDEEP

3072:nvSMwDeSjVeAgB77i/gbvlq5ZodgUcz3n:nvTwai/7gEga

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
736acf541cd45407cd6f9153b38fd9cb

Files

736acf541cd45407cd6f9153b38fd9cb
.exe windows:4 windows x86 arch:x86

ca8114dc91363dc75b6cfebe55498965

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
GlobalFlags
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
HeapFree
HeapAlloc
RtlUnwind
GetTimeZoneInformation
GetSystemTime
ExitThread
HeapReAlloc
TerminateProcess
GetStartupInfoA
GetCommandLineA
SetStdHandle
GetFileType
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetACP
FlushFileBuffers
SetFilePointer
lstrcpynA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GlobalAlloc
GetCurrentThread
SetLastError
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
TerminateThread
CreateThread
ResumeThread
lstrcmpA
CreateMutexA
ReleaseMutex
lstrcatA
WriteFile
CloseHandle
lstrcpyA
lstrlenA
InterlockedDecrement
lstrcmpiA
GetCurrentProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetLastError
GetExitCodeThread
GetLocalTime
InterlockedIncrement
Sleep
ExitProcess
HeapSize
WritePrivateProfileStringA

user32

GetSysColorBrush
DestroyMenu
GetDC
ReleaseDC
ClientToScreen
PtInRect
GetClassNameA
LoadStringA
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
WaitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
LoadCursorA
LoadIconA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
EnableWindow
MessageBoxA
UnregisterClassA
GrayStringA
DrawTextA
CallNextHookEx
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
TabbedTextOutA
GetPropA
CallWindowProcA
TranslateMessage
DispatchMessageA
GetMessageA
MoveWindow
SetWindowLongA
GetWindowLongA
SetTimer
KillTimer
SendMessageA
IsWindowEnabled
GetDlgItem
GetParent
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
IsWindow
SetActiveWindow
GetActiveWindow
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
DeleteDC
GetStockObject
GetDeviceCaps
SelectObject
DeleteObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

ole32

OleRun
CoCreateInstance
CLSIDFromString
CoInitializeEx
CLSIDFromProgID

oleaut32

VariantChangeType
VariantClear
VariantCopy
VariantInit
SysAllocString
SysStringLen
SysFreeString

wsock32

sendto
recvfrom
WSAAsyncSelect
closesocket
select
connect
inet_ntoa
htons
socket
ioctlsocket
WSACleanup
WSAStartup
WSASetLastError
WSAGetLastError
accept
bind
htonl
gethostbyname
recv
send

wininet

HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
HttpAddRequestHeadersA
InternetOpenA
InternetSetOptionA
InternetConnectA
InternetReadFile

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca8114dc91363dc75b6cfebe55498965

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ole32

oleaut32

wsock32

wininet

Sections

.text Size: 116KB - Virtual size: 113KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 116KB - Virtual size: 113KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 8KB - Virtual size: 7KB