772a556fb48c75dc21f78f0aafa3f066

Sharing

Copy URL Twitter E-mail

General

Target

772a556fb48c75dc21f78f0aafa3f066
Size

32KB
MD5

772a556fb48c75dc21f78f0aafa3f066
SHA1

e2cec666b6427c97c3a5b4c50126a6791d8ab0e2
SHA256

22ed71612b960fe8fe7fb16b7e44910ac3c5ddd3f65513b6a5cbfaf9ba9038e8
SHA512

a8f8fa872af451c1f523992fbea1de134c06bcbe4dd78101f7fd8a4f997533abef860b5970d99d4c70f9e72de5953dc528ce4f50915e360f5ab666162a95e89a
SSDEEP

768:c/eMXw4wTt0e/NH0yHZCMc5SyGfh/WYn4SIBkmbjVBHF7UFL:UXKrwMc47/zIeSVBHBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772a556fb48c75dc21f78f0aafa3f066

Files

772a556fb48c75dc21f78f0aafa3f066
.exe windows:4 windows x86 arch:x86

d249f27a92036126357b4dcbc62e4ed6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
DeviceIoControl
GetCommMask
UnmapViewOfFile
RtlUnwind
GetSystemWindowsDirectoryW
CopyFileExA
LockFileEx
IsValidLanguageGroup
WriteConsoleOutputAttribute
GetConsoleCursorInfo
CompareFileTime
GetFileAttributesA
LockFile
InterlockedDecrement
SetLocaleInfoA
SetFileAttributesW
GetAtomNameA
GlobalGetAtomNameW
FindFirstVolumeMountPointA
EnumDateFormatsExW
WritePrivateProfileSectionA
GetDiskFreeSpaceW
VirtualQuery
CreateThread
InterlockedExchange
WriteFileGather
Heap32First
SetFilePointerEx
SetDefaultCommConfigA
GetFileTime
SetMailslotInfo
GetDiskFreeSpaceA
InitializeCriticalSection
OpenEventW
FlushViewOfFile
VirtualProtectEx
GetPrivateProfileSectionW
GetThreadPriority
GenerateConsoleCtrlEvent
PrepareTape
GetPrivateProfileSectionA
GetThreadContext
GetFileSizeEx
Heap32Next
GetMailslotInfo
GetDriveTypeA
SetCurrentDirectoryA
ReadFile
SetWaitableTimer
SetVolumeMountPointW
FreeEnvironmentStringsA
SetConsoleCursor
SearchPathW
VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
LoadLibraryA
GetLastError
GetProcAddress

user32

MapWindowPoints
GetKeyState
LoadAcceleratorsA
EnumDisplaySettingsW
ToAsciiEx
SetUserObjectInformationW
InvertRect
EnumPropsExA
LoadMenuA
GetMenuItemCount
CharNextExA
GetClassWord
ShowCursor
GetPriorityClipboardFormat
GetUpdateRect
DeregisterShellHookWindow
PostQuitMessage
PtInRect
EnumClipboardFormats
MonitorFromPoint
GetMonitorInfoW
DdeQueryConvInfo
GetMessageTime
CreateDesktopA
SetThreadDesktop
GetClassInfoW
GetKeyboardState
ReleaseCapture
DispatchMessageA
TranslateAccelerator
GetClipboardOwner
ReplyMessage
GetClassInfoExW
CreateDialogIndirectParamW
DrawIconEx
CharToOemBuffA
SetWindowsHookExA
EnumWindows
SetLayeredWindowAttributes
WaitMessage
SetDlgItemInt
SetFocus
IsCharAlphaW
GetKBCodePage
SendNotifyMessageW
BeginPaint
ModifyMenuW
IsClipboardFormatAvailable
SetWindowLongW
DdeEnableCallback
SendDlgItemMessageW
GetMonitorInfoA
InSendMessageEx
EnableWindow
GetScrollInfo
SetShellWindow
EnableScrollBar
DefDlgProcW
CreateMDIWindowW
EndTask
IsIconic
IsCharAlphaA
IsWindowUnicode
CharUpperBuffW
DialogBoxParamA
CharLowerA
KillTimer
OemToCharBuffW
SetClipboardData
PeekMessageW
SetMessageExtraInfo
MsgWaitForMultipleObjects
LoadIconA
GetQueueStatus
CharToOemA
UnloadKeyboardLayout
SendMessageTimeoutW
GetKeyboardLayout
MessageBoxA
SetSysColors
RegisterClipboardFormatW
GetClassLongW
EqualRect
SetParent
DeferWindowPos
EnumDisplaySettingsA
wsprintfW
CharToOemW
RegisterClassA
IsDlgButtonChecked

shlwapi

StrChrIA
wvnsprintfA
PathSkipRootW
PathIsRelativeW
SHSetThreadRef
PathCreateFromUrlW
StrRetToStrW
SHRegGetPathA
PathUnExpandEnvStringsA
UrlCreateFromPathA
SHRegQueryUSValueA
PathMatchSpecA
PathAddExtensionA
HashData
PathIsUNCA
PathStripToRootA
wnsprintfA
StrTrimA
StrRStrIW
PathRenameExtensionA
PathIsRootW
StrFormatKBSizeA
PathGetCharTypeW
SHQueryValueExA
UrlEscapeW
UrlGetPartW
StrFromTimeIntervalW
PathQuoteSpacesW
UrlIsNoHistoryW
SHOpenRegStream2W
UrlCreateFromPathW
SHDeleteEmptyKeyW
PathRenameExtensionW
PathGetDriveNumberW
SHRegWriteUSValueA
SHRegSetUSValueA
PathMakeSystemFolderA
StrRChrA
SHDeleteKeyA
UrlIsOpaqueW
PathBuildRootW
StrToIntA
GetMenuPosFromID
PathBuildRootA
UrlUnescapeA
SHRegCreateUSKeyA
PathRemoveFileSpecA
StrToIntW
StrCpyNW
PathIsPrefixW
SHRegGetUSValueW
StrCmpNIW
StrCmpNA
SHRegCloseUSKey
PathIsUNCServerShareW
UrlCombineW
PathFindOnPathA
PathIsURLW
SHDeleteValueW
UrlIsNoHistoryA
IntlStrEqWorkerW
PathIsRootA
StrDupA
SHAutoComplete
SHRegDuplicateHKey
SHRegSetPathW
StrCatW
PathIsLFNFileSpecA
PathIsUNCServerW
StrRChrW
PathGetCharTypeA
SHRegQueryInfoUSKeyA
PathRemoveArgsA
PathFindExtensionA
SHEnumValueA
PathIsDirectoryEmptyW
PathCombineW
SHDeleteEmptyKeyA
StrFromTimeIntervalA
PathFindOnPathW
UrlCompareA
SHRegDeleteEmptyUSKeyW
AssocQueryKeyW
StrNCatA
UrlCanonicalizeA
PathCombineA
StrSpnA
StrCSpnA
StrChrIW
PathParseIconLocationW
PathRemoveBlanksA
StrToIntExA
PathIsURLA
ChrCmpIA
PathAppendA
PathUnquoteSpacesA
AssocQueryStringW
UrlIsOpaqueA
PathSkipRootA
SHRegQueryUSValueW

advapi32

RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flat
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d249f27a92036126357b4dcbc62e4ed6

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 7KB - Virtual size: 6KB

.flat Size: 45KB - Virtual size: 45KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 7KB - Virtual size: 6KB

.flat
Size: 45KB - Virtual size: 45KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB