7742586975de4e783b24f11da09d467d

Sharing

Copy URL Twitter E-mail

General

Target

7742586975de4e783b24f11da09d467d
Size

320KB
MD5

7742586975de4e783b24f11da09d467d
SHA1

c1b77188d4383452e523ef21d2ba74e45617788a
SHA256

218ea59458ae782d6bc2e9a29a7194e862886eea534eb1996b07c112f8b4b5ef
SHA512

609c2d6bb8fd55a77ee477baf1036f5489ea37d6a65ee3602947c181e282b77f17404ea8d33819392c00bca5e53bd693f643e2a8fc6ecd06420ca341c7ccf84d
SSDEEP

6144:ZXIMX2wCDmTUVMNBCIoifMQQ7er0mXWMkn9ViKDhOFy9HVBvuQYWcEwEK06D:ZXn3RTUVnIKQtvWMmYEBHVB2QYbE6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7742586975de4e783b24f11da09d467d

Files

7742586975de4e783b24f11da09d467d
.exe windows:4 windows x86 arch:x86

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

atoi
memmove

user32

wvsprintfW
wsprintfW
wsprintfA
UpdateWindow
TranslateMessage
SetWindowLongW
SetTimer
SetRect
SetCursor
SetClipboardData
SendMessageW
ReleaseDC
RegisterClassW
PostMessageW
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
LoadStringW
LoadStringA
LoadCursorW
KillTimer
IsWindow
InvalidateRect
GetWindowLongW
GetParent
GetMessageW
GetDC
GetClipboardData
GetClientRect
GetClassInfoW
GetAsyncKeyState
EqualRect
EndPaint
EmptyClipboard
DispatchMessageW
DefWindowProcW
CreateWindowExW
CloseClipboard
ClientToScreen
BeginPaint

kernel32

lstrlenW
lstrlenA
lstrcpynW
lstrcpyW
lstrcpyA
lstrcmpiW
lstrcatW
lstrcatA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
Sleep
SetThreadPriority
SetFilePointer
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalUnlock
LocalLock
LocalHandle
LocalFree
LocalAlloc
LoadLibraryW
CloseHandle
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetACP
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
GetOverlappedResult
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetThreadPriority
GetVersionExW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatusEx
GlobalReAlloc
GlobalUnlock
HeapAlloc
LeaveCriticalSection
InitializeCriticalSection
IsBadCodePtr
IsBadHugeReadPtr
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
HeapFree

gdi32

SetWindowOrgEx
SelectPalette
SelectObject
RealizePalette
PatBlt
GetSystemPaletteEntries
GetStockObject
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetDeviceCaps
GetDCOrgEx
GetClipBox
DeleteObject
CreatePalette

winmm

mmioWrite
timeGetTime
waveInAddBuffer
waveInClose
waveInOpen
waveInPrepareHeader
waveInReset
mmioSeek
waveInStop
waveInUnprepareHeader
waveOutGetNumDevs
SendDriverMessage
OpenDriver
CloseDriver
mmioRead
mmioOpenW
mmioFlush
mmioDescend
mmioCreateChunk
mmioClose
mmioAscend
waveInStart
mciSendStringW

advapi32

RegCloseKey
RegCreateKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_snprintf
libintl_sprintf
libintl_textdomain
libintl_vfprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf
ngettext
set_relocation_prefix
textdomain

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

Imports

ntdll

user32

kernel32

gdi32

winmm

advapi32

version

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 12KB