746ae2db70ea9e998134fe7175e8a415

Sharing

Copy URL Twitter E-mail

General

Target

746ae2db70ea9e998134fe7175e8a415
Size

864KB
MD5

746ae2db70ea9e998134fe7175e8a415
SHA1

cebfc8c165acc27849fcec135d2905c6953dd8f3
SHA256

de88523a3c619239af71c905a9b48b22f8ee97fcae7fefa702bb9d29b5d032bd
SHA512

cfdd77774bcbe49ccf2a09e201d0331213271b138c94d46237a491bb1af8733b62f8356f4195d0ff659f34f62720370f6e5b9d74f2f0a36d856589a41e58bd8f
SSDEEP

12288:WRRCP2bFAQpd12yiF5FzU14enKCrP8OudalnO0DX1qvRXvN0X0eewaNrByOHUaGF:WdRK5FzDenL9O0DFqvK0ym9GZnj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
746ae2db70ea9e998134fe7175e8a415

Files

746ae2db70ea9e998134fe7175e8a415
.exe windows:5 windows x86 arch:x86

9cc85bba69252d885d1c13792280f50c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetDescriptionA
ImmRegisterWordA
ImmAssociateContext
ImmLockIMC
ImmCreateContext
ImmSetHotKey
ImmSendIMEMessageExW
ImmIMPSetIMEW
ImmGetDefaultIMEWnd
ImmIMPQueryIMEW
ImmGetCompositionFontA
ImmLockIMCC
ImmWINNLSGetIMEHotkey
ImmSetCandidateWindow
ImmGetCandidateListA
ImmDestroyContext
ImmCallImeConsoleIME
ImmProcessKey
ImmReleaseContext
ImmGetCandidateListW
ImmGetDescriptionW
ImmDestroyIMCC
ImmUnlockIMC
ImmTranslateMessage
ImmActivateLayout
ImmRequestMessageA
ImmInstallIMEW
ImmIsIME
ImmSendIMEMessageExA
ImmDestroySoftKeyboard
ImmRegisterWordW
ImmIMPGetIMEW

msvcrt40

??7ios@@QBEHXZ
__p__environ
wprintf
_lrotr
mktime
?set_new_handler@@YAP6AXXZP6AXXZ@Z
_spawnvp
_get_osfhandle
??_Gistrstream@@UAEPAXI@Z
_execvpe
??_7strstream@@6B@
??6ostream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
?cout@@3Vostream_withassign@@A
__p__daylight
_mbclen
??_Eistream_withassign@@UAEPAXI@Z
_filbuf
floor
sscanf
??0ostrstream@@QAE@PADHH@Z
exp
??_Difstream@@QAEXXZ
_spawnvpe
??_Dfstream@@QAEXXZ
_getw
?width@ios@@QBEHXZ

kernel32

ActivateActCtx
EnumResourceTypesA
QueryMemoryResourceNotification
GetAtomNameW
ReadConsoleInputW
BackupSeek
GetCalendarInfoW
CreateFileA
GetPrivateProfileSectionNamesA
ConvertFiberToThread
GetSystemWow64DirectoryA
VirtualFree
CreateEventA
SetErrorMode
CreateEventW
CreateTimerQueue
VirtualAlloc
FatalExit
ReadConsoleInputA
FindNextChangeNotification
SetFirmwareEnvironmentVariableA
_hread
LocalFree
GetComputerNameA
SearchPathW
UnlockFileEx
EndUpdateResourceA
GetProcessIoCounters
IsValidCodePage
SetHandleInformation
GetCPInfoExA
lstrcat
LoadLibraryA
EnterCriticalSection
SetupComm
SetConsoleMode
SetConsoleInputExeNameA

advapi32

CryptCreateHash
OpenEncryptedFileRawW
LsaQueryDomainInformationPolicy
LsaClearAuditLog
EnumerateTraceGuids
SetEntriesInAccessListW
SetUserFileEncryptionKey
RegisterTraceGuidsW
CreateCodeAuthzLevel
LsaSetInformationTrustedDomain
GetSecurityDescriptorLength
LsaLookupPrivilegeName
CryptGetDefaultProviderW
StartServiceCtrlDispatcherW
EqualSid
GetPrivateObjectSecurity
UninstallApplication
WmiSetSingleItemW
GetAccessPermissionsForObjectA
GetWindowsAccountDomainSid
InitiateSystemShutdownA
RegEnumKeyExW
FileEncryptionStatusW
OpenSCManagerA
LookupSecurityDescriptorPartsA
LsaGetUserName
SystemFunction026
TraceMessageVa
WmiQuerySingleInstanceA

setupapi

pSetupStringTableLookUpStringEx
CM_Modify_Res_Des_Ex
SetupDiGetSelectedDevice
SetupGetMultiSzFieldW
SetupGetTargetPathW
SetupDiClassNameFromGuidW
SetupFreeSourceListA
SetupDiGetWizardPage
SetupQueueRenameA
SetupDiGetCustomDevicePropertyW
SetupQueueDeleteSectionA
SetupDiSelectDevice
SetupAddToDiskSpaceListA
SetupDiSetClassRegistryPropertyW
SetupDiGetClassImageIndex
CM_Enumerate_Classes_Ex
SetupLogErrorA
CM_Request_Eject_PC_Ex
SetupDuplicateDiskSpaceListW
pSetupVerifyQueuedCatalogs
CM_Get_Device_ID_List_SizeW
SetupCopyErrorA
CM_Unregister_Device_Interface_ExA
CMP_WaitNoPendingInstallEvents
CM_Add_IDW
SetupSetFileQueueAlternatePlatformW
SetupDiGetDeviceRegistryPropertyW
SetupPromptForDiskW
SetupAddSectionToDiskSpaceListW
SetupDiGetDeviceInstanceIdA
CM_Get_DevNode_Registry_PropertyA
CM_Invert_Range_List
CM_Create_Range_List
CM_Get_Hardware_Profile_InfoW
SetupOpenLog
SetupDiDestroyClassImageList
CM_Reenumerate_DevNode
CM_Open_Class_Key_ExA
SetupInstallFromInfSectionA
SetupDiSetSelectedDriverA
SetupFreeSourceListW
pSetupStringFromGuid
SetupDiSetSelectedDriverW
CM_Query_Remove_SubTree_Ex

user32

SetClassLongA
DefWindowProcA
LoadIconW
GetPropA
MessageBoxA
SetShellWindow
ShowScrollBar
GetTaskmanWindow
GetAltTabInfo
GetLayeredWindowAttributes
DdeGetLastError
SetWindowLongA
RealGetWindowClassW
SwitchDesktop
TranslateMessage
DispatchMessageW
CreateDialogIndirectParamAorW
WaitMessage
BroadcastSystemMessageExA
UnhookWinEvent
DlgDirSelectExA
PaintDesktop
EndTask
UserRegisterWowHandlers
VkKeyScanExW
DialogBoxIndirectParamW
FindWindowW
MonitorFromWindow
DrawEdge
SetScrollRange
DrawCaption

Sections

.text
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cc85bba69252d885d1c13792280f50c

Headers

DLL Characteristics

File Characteristics

Imports

imm32

msvcrt40

kernel32

advapi32

setupapi

user32

Sections

.text Size: 458KB - Virtual size: 458KB

.rdata Size: 311KB - Virtual size: 311KB

.data Size: 91KB - Virtual size: 1.5MB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 458KB - Virtual size: 458KB

.rdata
Size: 311KB - Virtual size: 311KB

.data
Size: 91KB - Virtual size: 1.5MB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB