748aafaa4c870949acd5a282005f33c4

Sharing

Copy URL Twitter E-mail

General

Target

748aafaa4c870949acd5a282005f33c4
Size

147KB
MD5

748aafaa4c870949acd5a282005f33c4
SHA1

e8a15f5d96dfc74ef4f9c3e7ad86f87f4e9e7f52
SHA256

cff1d457c4f631bbe7db8b0a79b263cda45983308815b3bb9848cd9d4c6f1c25
SHA512

130452e9af12d1b61135377fc7c1219e5a747da2cbeb8d779d2946c2866d8413e291a303db37821e2ac339bcbbe85b952c300e7a157cef2a6638e5c69eba3961
SSDEEP

3072:ESwfuq+zMsSxsBUT+p8eiGcOqiJgmyidGvQ8uHl1s+O8edrqOVYQQGDL:Zq+zlLp8evcOq4gpld+O8ekMQ6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
748aafaa4c870949acd5a282005f33c4

Files

748aafaa4c870949acd5a282005f33c4
.exe windows:9 windows x86 arch:x86

9736b199000aac5bee93b1de4e8396ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
QueryPerformanceCounter
GetProcessHeap
WaitForSingleObject
MultiByteToWideChar
GetCommandLineW
FormatMessageW
GetCommandLineA
GetModuleHandleW
GetModuleHandleW
GetCurrentProcessId
GetCurrentProcessId
GetModuleFileNameA
FormatMessageW
MultiByteToWideChar
GetCommandLineW
GetCurrentProcess
QueryPerformanceCounter
GetProcessHeap
GetACP
VirtualFree
LocalFree
GetCommandLineA
FormatMessageW
QueryPerformanceCounter
GetModuleFileNameA
GetCurrentThreadId
SetEvent
GetTickCount
MultiByteToWideChar
GetCommandLineW
LocalAlloc
GetProcessHeap
FormatMessageW
GetCommandLineW
GetCommandLineW
SetEvent
GetProcessHeap
GetCurrentProcess
MultiByteToWideChar
GetTickCount
GetCurrentThreadId
GetModuleFileNameA
GetCommandLineW
SetUnhandledExceptionFilter
GetACP
SetEvent
GetCurrentThreadId
MultiByteToWideChar
SetEvent
GetTickCount
FormatMessageW
MultiByteToWideChar
GetModuleFileNameA
LocalAlloc
SetEvent
GetACP
SetUnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcess
QueryPerformanceCounter
FormatMessageW
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineA
QueryPerformanceCounter
QueryPerformanceCounter
LocalFree
GetCurrentThreadId
LocalFree
SleepEx
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
GetCommandLineW
MultiByteToWideChar
GetTickCount
GetACP
GetTickCount
SetUnhandledExceptionFilter
GetTickCount
GetCurrentProcess
GetCurrentThreadId
GetCommandLineA
SetUnhandledExceptionFilter
WaitForSingleObject
WaitForSingleObject
FormatMessageW
WaitForSingleObject
SetEvent
GetCurrentThreadId
QueryPerformanceCounter
LocalAlloc
GetModuleHandleW

gdi32

BitBlt
SelectObject
BitBlt
CreateCompatibleDC
DeleteDC
GetDeviceCaps
LineTo
CreateCompatibleBitmap
GetObjectW
GetStockObject
SetTextColor
PatBlt
GetTextMetricsW
BitBlt
SelectObject
MoveToEx
DeleteDC
CreateCompatibleDC
SetTextColor
GetStockObject
DeleteObject
LineTo
SetTextColor
GetDeviceCaps
PatBlt
GetDeviceCaps
BitBlt
SelectObject
DeleteObject
BitBlt
LineTo
SelectObject
DeleteDC
BitBlt
GetObjectW
LineTo
CreateCompatibleBitmap
SelectObject
PatBlt
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateCompatibleBitmap
DeleteObject
GetTextMetricsW
DeleteObject
GetTextMetricsW
GetTextMetricsW
SetTextColor
GetObjectW
BitBlt
CreateCompatibleBitmap
DeleteDC
SetTextColor
GetObjectW
GetObjectW
PatBlt
SelectObject
MoveToEx
GetDeviceCaps
BitBlt
BitBlt
GetTextMetricsW
CreateCompatibleBitmap
GetDeviceCaps
SetTextColor
CreateCompatibleBitmap
DeleteObject
PatBlt
PatBlt
SetTextColor
SetTextColor
DeleteObject
GetDeviceCaps
GetStockObject
CreateCompatibleBitmap
GetStockObject
GetObjectW
CreateCompatibleDC
SelectObject
DeleteObject
CreateCompatibleBitmap
SelectObject
GetTextMetricsW
BitBlt
CreateCompatibleDC
GetStockObject
GetDeviceCaps
DeleteObject
DeleteObject
CreateCompatibleBitmap
GetStockObject
PatBlt
MoveToEx
CreateCompatibleDC
GetObjectW
BitBlt
SelectObject
PatBlt
MoveToEx
DeleteDC
CreateCompatibleBitmap
GetStockObject
DeleteObject

user32

DestroyWindow
PostMessageW
GetMessageW
ReleaseDC
LoadIconW
DestroyWindow
DefWindowProcW
DestroyWindow
GetMessageW
GetDC
DefWindowProcW
DestroyWindow
LoadIconW
GetSystemMetrics
GetDlgItem
ShowWindow
SetTimer
GetDlgItem
DestroyWindow
CreateWindowExW
SendMessageW
SetTimer
PostMessageW
PostMessageW
GetMessageW
GetWindowRect
GetWindowRect
SetTimer
DefWindowProcW
GetMessageW
ShowWindow
GetMessageW
GetSystemMetrics
ShowWindow
GetDC
SetTimer
GetDC
PostMessageW
PostMessageW
SendMessageW
CreateWindowExW
GetDlgItem
DestroyWindow
GetSystemMetrics
GetDlgItem
DefWindowProcW
SetTimer
ReleaseDC
GetMessageW
ReleaseDC
DestroyWindow
ReleaseDC
GetSystemMetrics
GetMessageW
ReleaseDC
ReleaseDC
PostMessageW
SendMessageW
DefWindowProcW
GetDlgItem
ReleaseDC
GetDlgItem
GetSystemMetrics
SetTimer
ReleaseDC
DefWindowProcW
CreateWindowExW
GetDC
CreateWindowExW
ShowWindow
ShowWindow
LoadIconW
ShowWindow
CreateWindowExW
GetDlgItem
ReleaseDC
DestroyWindow
GetWindowRect
SetTimer
PostMessageW
DefWindowProcW
SendMessageW
GetDlgItem
DestroyWindow
DefWindowProcW
ReleaseDC
GetDC
SetTimer
PostMessageW
DefWindowProcW
DefWindowProcW
DestroyWindow
PostMessageW
GetWindowRect
DefWindowProcW
ShowWindow
GetDC
GetDlgItem
DefWindowProcW
SendMessageW
GetDlgItem
DestroyWindow
GetDC
PostMessageW
SetTimer
SendMessageW

ntdll

NtAllocateVirtualMemory

Sections

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9736b199000aac5bee93b1de4e8396ac

Headers

File Characteristics

Imports

kernel32

gdi32

user32

ntdll

Sections

.data Size: 28KB - Virtual size: 28KB

.data Size: 7KB - Virtual size: 8KB

.data Size: 108KB - Virtual size: 112KB

.rsrc Size: 2KB - Virtual size: 124KB

.data
Size: 28KB - Virtual size: 28KB

.data
Size: 7KB - Virtual size: 8KB

.data
Size: 108KB - Virtual size: 112KB

.rsrc
Size: 2KB - Virtual size: 124KB