737abcad33814da26b25a43e6851fca8

Sharing

Copy URL

Twitter E-mail

General

Target

737abcad33814da26b25a43e6851fca8
Size

72KB
MD5

737abcad33814da26b25a43e6851fca8
SHA1

57f45e5c1f2aacf8db5cce882a96eb2598e4f490
SHA256

bddc18d4d1693fa2c464fc24196fe89a930b3019fa7b751a58856a5752b4a338
SHA512

ce6ea5ce6c984f873a6ebd8922d81d58b886e87a6a2115b62aff975b1e504f841f12af59e4082e7ac471b6eb4a48e58dc2069f22f888da747adf9d3d18475c4d
SSDEEP

1536:WzeJL9ihxoI+rtyWASIC4qrFfpFF60a8U3/HN1t8rn7IPCFiR3fsk6+/vmjof:Wz/hxoI+rty+IjqrLa8UvNzLPjfsXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737abcad33814da26b25a43e6851fca8

Files

737abcad33814da26b25a43e6851fca8
.exe windows:5 windows x86 arch:x86

c778bcfb56c72d7b39ac2e740dea3018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantClear
StgCreateDocfile
CoGetObjectContext
OleInitialize
StringFromGUID2
CoRevertToSelf
OleLoadFromStream
CoCreateGuid
OleTranslateAccelerator
StgCreateDocfileOnILockBytes
ReleaseStgMedium
StgOpenStorage
CoUninitialize
CoMarshalInterThreadInterfaceInStream
OleUninitialize
CoGetInterfaceAndReleaseStream
CoUnmarshalInterface
CoReleaseMarshalData
CLSIDFromString
GetHGlobalFromStream
GetRunningObjectTable
CoTaskMemFree

version

GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA

user32

EnumChildWindows
SendDlgItemMessageA
PeekMessageA
SystemParametersInfoW
GetProcessWindowStation
ScreenToClient
GetPropA
GetSysColorBrush
SetRect
DestroyWindow
CharUpperW
IntersectRect
WinHelpW
IsMenu
wsprintfA
LoadCursorA
GetActiveWindow
GetFocus
MoveWindow
CreateWindowExA
GetWindowLongW
GetCursorPos
GetSysColor
SetMenu
PostQuitMessage
GetWindowPlacement
GetClassNameW
BeginPaint
ChangeMenuW
GetDlgItem
GetDC
GetCapture
EqualRect
SetForegroundWindow
DrawFocusRect
SetDlgItemTextW
EnableWindow

comctl32

InitCommonControls
ImageList_Create
ImageList_ReplaceIcon
CreatePropertySheetPageW
ImageList_Draw

advapi32

RegQueryValueW
ConvertStringSidToSidW
RegEnumKeyW
SetEntriesInAclW
RegQueryValueExA
OpenSCManagerA
GetSecurityDescriptorDacl
OpenServiceW
RegEnumValueW
InitializeAcl
EqualSid
RegCreateKeyExW
IsValidSecurityDescriptor
GetTraceEnableLevel
GetLengthSid
StartServiceW
RegisterTraceGuidsW
InitializeSecurityDescriptor
UnregisterTraceGuids
OpenServiceA
CheckTokenMembership
InitializeSid
RegFlushKey
RegQueryValueExW
RegDeleteValueW
SetSecurityDescriptorDacl
RegSetValueExW
RegOpenKeyA

msvcrt

_stricmp
iswalpha
_unlock
_isatty
wcsncmp
toupper
_itow
__CxxFrameHandler
isdigit
_wcslwr
time
_wsplitpath
bsearch
_except_handler3
__set_app_type
??3@YAXPAX@Z
strncpy
iswspace
??1type_info@@UAE@XZ
wcsncpy

kernel32

DeleteCriticalSection
lstrlenW
GetFileAttributesA
TlsGetValue
HeapDestroy
EnterCriticalSection
MapViewOfFile
lstrcpynA
InitializeCriticalSectionAndSpinCount
ResetEvent
GetFileSize
GetLocaleInfoW
GetCurrentProcess
CompareStringA
ExitProcess
InterlockedCompareExchange
FileTimeToLocalFileTime
GlobalFree
VirtualAlloc
lstrcatA
GetModuleFileNameW
CreateEventA
GetLastError
OpenProcess
SetFileAttributesW

rpcrt4

RpcRaiseException
RpcStringBindingComposeW
RpcRevertToSelf
NdrDllUnregisterProxy
NdrOleAllocate
RpcStringFreeA
NdrStubForwardingFunction
RpcStringBindingParseW
RpcServerUseProtseqEpW
CStdStubBuffer_AddRef
RpcBindingSetAuthInfoW
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
RpcBindingFree
CStdStubBuffer_DebugServerQueryInterface
RpcBindingVectorFree
NdrDllCanUnloadNow
CStdStubBuffer_IsIIDSupported

Sections

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 39KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c778bcfb56c72d7b39ac2e740dea3018

Headers

File Characteristics

Imports

ole32

version

user32

comctl32

advapi32

msvcrt

kernel32

rpcrt4

Sections

.rdata Size: 6KB - Virtual size: 5KB

.text Size: 10KB - Virtual size: 9KB

DATA Size: 1KB - Virtual size: 1KB

BSS Size: 14KB - Virtual size: 28KB

.idata Size: 39KB - Virtual size: 84KB

.rdata
Size: 6KB - Virtual size: 5KB

.text
Size: 10KB - Virtual size: 9KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: 14KB - Virtual size: 28KB

.idata
Size: 39KB - Virtual size: 84KB