7873f10f3011a0883fa4b7fd90eeb249

Sharing

Copy URL Twitter E-mail

General

Target

7873f10f3011a0883fa4b7fd90eeb249
Size

144KB
MD5

7873f10f3011a0883fa4b7fd90eeb249
SHA1

83f46feb6ab87feb59af9427a394890e23d12ed9
SHA256

bb181e61fb5b21c6a36211ce5df8a99da6a4b0ac12e41b341508da878917ff56
SHA512

d9631923b3d081e81196c81465931f89de61a06cd1c2246803e3b8032c731ffe5f56600fdcb1b0dab2a2bfd9a51a8b9db7bd34deec3bb127ced0a2bc006ecb51
SSDEEP

3072:gVmi6W10Kb/Ol6ZJRNnA7gJR3rD0vRaSuXsNYFfPY:KtF7b/46ZOgcNnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7873f10f3011a0883fa4b7fd90eeb249

Files

7873f10f3011a0883fa4b7fd90eeb249
.exe windows:4 windows x86 arch:x86

d9da60a1c0677076148176c94826007b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

gdi32

DeleteDC
GetObjectW
DeleteObject
EndPage
GetStockObject
SelectObject
SetBkMode
GetDeviceCaps
CreateDCW
AbortDoc
GetTextExtentPoint32W
StartPage
EnumFontsW
TextOutW
SetMapMode
LPtoDP
GetTextMetricsW
CreateFontIndirectW
GetTextFaceW
SetViewportExtEx
SetWindowExtEx
StartDocW
SetAbortProc
EndDoc

kernel32

FindResourceW
GlobalLock
MultiByteToWideChar
LocalReAlloc
lstrcpynW
GetModuleHandleA
TlsFree
LocalSize
SetFilePointer
DeleteFileW
LoadLibraryW
EnterCriticalSection
HeapReAlloc
RemoveDirectoryW
WideCharToMultiByte
GetUserDefaultLCID
LocalLock
FreeEnvironmentStringsW
Sleep
LocalAlloc
InitializeCriticalSection
InterlockedExchange
GetProcessHeap
FindClose
VirtualFree
VirtualProtect
lstrcpyW
GetDateFormatW
UnhandledExceptionFilter
GetUserDefaultUILanguage
GetEnvironmentVariableA
WriteFile
GetLastError
MulDiv
UnmapViewOfFile
VirtualAlloc
ExitProcess
WriteConsoleA
GetStartupInfoA
InterlockedIncrement
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
lstrcatW
GetACP
GetTimeFormatW
GetSystemTime
QueryPerformanceCounter
GetLocalTime
MapViewOfFile
GetLocaleInfoW
WaitForSingleObject
HeapFree
GetTickCount
SetEndOfFile
GetCurrentProcessId
LoadLibraryA
TlsAlloc
CompareStringW
GetFileInformationByHandle
GetConsoleOutputCP
ReleaseSemaphore
ResetEvent
GetFileAttributesW
FreeLibrary
FindFirstFileW
TlsGetValue
LCMapStringA
GetCurrentThreadId
GetCommandLineA
LocalFree
lstrcpynA
ReadFile
HeapCreate
lstrcmpW
GlobalUnlock
lstrcmpiW
RaiseException
GetSystemTimeAsFileTime
SetErrorMode
lstrlenW
CreateFileW
CloseHandle
CreateDirectoryW
LocalUnlock
CreateFileMappingW
FormatMessageW
FoldStringW
GetCommandLineW
IsDebuggerPresent
GetProcAddress
GlobalFree
DeleteCriticalSection

user32

CheckMenuItem
GetWindowLongW
RegisterWindowMessageW
ChildWindowFromPoint
ShowWindow
GetWindowTextW
CreateWindowExW
RegisterWindowMessageA
GetSystemMetrics
CharUpperW
PeekMessageW
wsprintfW
DialogBoxParamW
SendDlgItemMessageA
CheckDlgButton
EnableWindow
MessageBeep
EndDialog
SetScrollPos
SetWinEventHook
ScreenToClient
SetActiveWindow
DrawTextExW
LoadIconW
MoveWindow
GetDlgItemTextW
SetCursor
FillRect
LoadStringW
CreateDialogParamW
SetWindowLongW
GetDC
SendMessageW
DefWindowProcW
LoadMenuW
OpenClipboard
PostMessageW
IsWindow
UpdateWindow
GetClientRect
GetParent
LoadStringA
SetWindowPlacement
IsClipboardFormatAvailable
DestroyWindow
InvalidateRect
GetMenu
CharNextW
GetMessageW
GetKeyboardLayout
EnableMenuItem
GetFocus
GetMenuState
TranslateMessage
GetSystemMenu
GetWindowPlacement
SetWindowTextW
RegisterClassExW
GetWindowLongA
SetDlgItemTextW
GetCursorPos
ReleaseDC
LoadAcceleratorsW
SendDlgItemMessageW
LoadImageW
CharLowerW
GetDlgItem
DrawEdge
CloseClipboard
MessageBoxW
GetSubMenu
TranslateAcceleratorW
GetForegroundWindow
GetWindowDC
SetFocus
IsDialogMessageW
DispatchMessageW
LoadCursorW
GetDesktopWindow
UnhookWinEvent
GetDlgCtrlID
PostQuitMessage
PtInRect
IsIconic
WinHelpW

msvcrt

_wtol
_cexit
_wcsicmp
_acmdln
realloc
__set_app_type
__p__commode
_XcptFilter
_controlfp
_adjust_fdiv
wcsncpy
_c_exit
exit
__setusermatherr
_amsg_exit
localtime
_snwprintf
_exit
time
__getmainargs
_wtoi
__p__fmode
wcsncmp
iswctype
_initterm

winspool.drv

OpenPrinterW
GetPrinterDriverW
ClosePrinter

shell32

DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

comdlg32

ReplaceTextW
ChooseFontW
CommDlgExtendedError
PageSetupDlgW
PrintDlgExW
FindTextW
GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW

comctl32

CreateStatusWindowW

advapi32

RegQueryValueExA
RegQueryValueExW
IsTextUnicode
RegOpenKeyExA
RegCloseKey
RegCreateKeyW
RegSetValueExW

Sections

.text
Size: 1024B - Virtual size: 845B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9da60a1c0677076148176c94826007b

Headers

File Characteristics

Imports

gdi32

kernel32

user32

msvcrt

winspool.drv

shell32

comdlg32

comctl32

advapi32

Sections

.text Size: 1024B - Virtual size: 845B

.rdata Size: 105KB - Virtual size: 105KB

.data Size: 15KB - Virtual size: 74KB

.reloc Size: 512B - Virtual size: 216B

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 1024B - Virtual size: 845B

.rdata
Size: 105KB - Virtual size: 105KB

.data
Size: 15KB - Virtual size: 74KB

.reloc
Size: 512B - Virtual size: 216B

.rsrc
Size: 20KB - Virtual size: 20KB