75efc4feb0d977662b5634404715510c

Sharing

Copy URL Twitter E-mail

General

Target

75efc4feb0d977662b5634404715510c
Size

620KB
MD5

75efc4feb0d977662b5634404715510c
SHA1

b50814a7e229d1efc2c0b4da2db231c3058e3dba
SHA256

e092f34887ab77fdcb630f5c79252bafd8d99d907b758ed074ffcaab319618ec
SHA512

68f2150bf7b475a3669b9ce6a6eb6feba160637313b71e175a7897c07e003777bef6cba68b68d953a3471e9b6626aedf742a7a209cdcc90fa9b791f436c04b01
SSDEEP

12288:NVrp/mkZku9wkAjfZfZ0yGxXaYxROxsZECBJomIGGA35eU:NVF/DSuQdZ01ayOxQjJ9VGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75efc4feb0d977662b5634404715510c

Files

75efc4feb0d977662b5634404715510c
.exe windows:4 windows x86 arch:x86

f8681ffa23c4eb5f5c5f22de14a7e17a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
CreateIcon
DdeUninitialize
GetWindowModuleFileNameW
MessageBoxW
GetPropW
IsIconic
DlgDirSelectComboBoxExW
InvalidateRect
ShowWindow
OemToCharBuffW
MapVirtualKeyA
RealChildWindowFromPoint
SetWindowsHookW
SetMessageQueue
DragObject
GetKeyState
DestroyWindow
LookupIconIdFromDirectoryEx
SetCaretBlinkTime
CreateDialogIndirectParamW
DestroyMenu
LoadCursorA
DrawStateW
wsprintfA
EnumDesktopsA
DispatchMessageA
SetUserObjectInformationA
GetWindowRgn
TabbedTextOutW
DdeFreeStringHandle
InsertMenuA
GrayStringA
SetFocus
SetMenu
GetWindowContextHelpId
GetGUIThreadInfo
GetKeyNameTextW
GetAncestor
HideCaret
AttachThreadInput
RegisterClassA
RegisterClassExA
GetDlgItemTextW
InflateRect
CreateWindowStationW
CreateWindowExA
EnumWindowStationsW
SetMenuItemBitmaps
PostMessageW
TranslateAcceleratorW
DefWindowProcA
RemovePropA
GetClassNameW
GetTabbedTextExtentW
CreateCaret
FindWindowExA
GetWindowModuleFileNameA
RegisterHotKey
DrawMenuBar
GetWindowWord
GetDlgItem
OemToCharBuffA
DrawEdge
DlgDirListA
BringWindowToTop
SetWindowContextHelpId
GetAsyncKeyState
SetWindowTextW
TrackPopupMenu
CreateAcceleratorTableA
MessageBoxA
OpenIcon
GetNextDlgTabItem
GetMenuState
DlgDirSelectExW
GetWindowLongA
GrayStringW
CreateMDIWindowA
GetKeyboardState
DeleteMenu
CreateDesktopW
InternalGetWindowText
SendNotifyMessageW
OpenWindowStationA
MoveWindow
SetDlgItemTextA
MsgWaitForMultipleObjectsEx
ShowScrollBar
SwapMouseButton
SendMessageW
EndDeferWindowPos
SendInput
GetMenuItemInfoA
VkKeyScanExW
PostThreadMessageA
OpenDesktopA

shell32

ExtractIconExA
SHFileOperationW

kernel32

SetFilePointer
LCMapStringW
GlobalFindAtomA
InterlockedDecrement
GetCommandLineA
TlsFree
GetCommandLineW
UnhandledExceptionFilter
WideCharToMultiByte
ExitProcess
MultiByteToWideChar
DeleteCriticalSection
RtlUnwind
EnterCriticalSection
GetProcAddress
RtlFillMemory
GetOEMCP
MoveFileA
GetModuleFileNameW
GetTimeZoneInformation
GlobalHandle
lstrcpyn
VirtualQuery
HeapDestroy
VirtualFree
QueryPerformanceCounter
SystemTimeToFileTime
HeapReAlloc
WritePrivateProfileStringA
CreateMutexA
SetCurrentDirectoryW
GetEnvironmentStrings
SetThreadAffinityMask
LeaveCriticalSection
TlsAlloc
LoadResource
InterlockedExchange
GetCurrentProcess
SetLastError
SetStdHandle
GetThreadPriority
OpenMutexA
FreeEnvironmentStringsA
HeapAlloc
GetCurrentThreadId
GetStringTypeW
GetCPInfo
CompareStringW
VirtualAlloc
GetProcessShutdownParameters
lstrcmpiW
GetVersion
GetLocaleInfoA
GetTickCount
ReadConsoleOutputCharacterW
SetEnvironmentVariableA
WriteFile
LoadLibraryA
SetHandleCount
DebugBreak
TlsSetValue
IsBadWritePtr
GetExitCodeThread
GetSystemTimeAsFileTime
TlsGetValue
ReadFile
InitializeCriticalSection
GetLastError
GetStartupInfoA
GetStartupInfoW
GetCurrentThread
GetFileType
GetSystemTime
GetStringTypeA
CloseHandle
HeapFree
TerminateProcess
GetStdHandle
GetModuleFileNameA
InterlockedIncrement
GetEnvironmentStringsW
GetCurrentProcessId
HeapLock
CompareStringA
GetModuleHandleA
lstrcmpA
SetSystemTime
FreeEnvironmentStringsW
LCMapStringA
HeapCreate
GetLocalTime
GetTempFileNameW
VirtualAllocEx
FlushFileBuffers

wininet

InternetConnectA
SetUrlCacheGroupAttributeA
InternetConnectW
InternetAlgIdToStringA
FtpPutFileA
FtpPutFileEx
InternetQueryFortezzaStatus
InternetOpenW

comctl32

ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetImageCount
InitCommonControlsEx
CreateStatusWindowA
ImageList_GetImageRect
ImageList_GetFlags
ImageList_GetIconSize
CreateStatusWindowW
CreateMappedBitmap
CreateStatusWindow
ImageList_SetFlags
ImageList_Remove
CreateToolbarEx
CreatePropertySheetPageW
ImageList_SetOverlayImage

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8681ffa23c4eb5f5c5f22de14a7e17a

Headers

File Characteristics

Imports

user32

shell32

kernel32

wininet

comctl32

Sections

.text Size: 188KB - Virtual size: 184KB

.rdata Size: 260KB - Virtual size: 258KB

.data Size: 112KB - Virtual size: 117KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 188KB - Virtual size: 184KB

.rdata
Size: 260KB - Virtual size: 258KB

.data
Size: 112KB - Virtual size: 117KB

.rsrc
Size: 56KB - Virtual size: 53KB