7a48df7e822653332cebf9e195ef96bd

Sharing

Copy URL Twitter E-mail

General

Target

7a48df7e822653332cebf9e195ef96bd
Size

257KB
MD5

7a48df7e822653332cebf9e195ef96bd
SHA1

67cf4aa7570978835fe2f4b5e794d3fe9721414e
SHA256

8ab544e9e02da0ed213dee344c2d757f8698dffc84cb281ae94feab9b90ce628
SHA512

d53c03b6d08b015aea5f5fe809f96883cfa227d6036b2ef667bfff2284e728c1ea23137567013061c74cfd6cd2a88dda84032b2ed95a4c937c75af3ff0b62d62
SSDEEP

3072:I9g17PCP5Sa1BXg4xSJqbSojZCVToqlE7Vwcg5NDSl5GQCxIqOD6P4R8:IgK5SqljiJK86qeG5IqX7OMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a48df7e822653332cebf9e195ef96bd

Files

7a48df7e822653332cebf9e195ef96bd
.exe windows:4 windows x86 arch:x86

6002afc29f19172f9791f775c1129aef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
GlobalFree
GlobalUnlock
lstrcpyA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetLastError
MulDiv
LocalFree
LocalAlloc
TlsAlloc
GlobalHandle
InterlockedIncrement
GlobalReAlloc
LocalReAlloc
TlsGetValue
lstrcpynA
GlobalFlags
WritePrivateProfileStringA
GetLastError
GetProcessVersion
SizeofResource
GetCPInfo
GetOEMCP
SetErrorMode
GetCurrentProcess
ReadFile
SetFilePointer
FlushFileBuffers
TlsFree
TlsSetValue
GetProfileStringA
InterlockedExchange
RtlUnwind
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
GetStartupInfoA
GetCommandLineA
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalMemoryStatus
GetVersionExA
GetPrivateProfileStringA
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetComputerNameA
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
FindResourceA
LoadResource
LockResource
CreateFileA
WriteFile
ExpandEnvironmentStringsA
CopyFileA
CreateThread
CreateProcessA
DeleteFileA
TerminateProcess
TerminateThread
OpenProcess
Sleep
GetSystemDirectoryA
GetTickCount
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetTempPathA
CloseHandle
SetEndOfFile

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

comctl32

gdi32

GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
PatBlt
SelectObject
GetClipBox
SetTextColor
SetBkColor
GetObjectA
SetBkMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
DeleteDC
SaveDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
RestoreDC
GetStockObject
CreateBitmap

mpr

WNetAddConnection3A
WNetCancelConnection2A

shell32

ShellExecuteA

user32

LoadCursorA
EndDialog
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
GetClassInfoA
wsprintfA
WinHelpA
GetCapture
GetTopWindow
CopyRect
ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
ShowWindow
LoadStringA
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CreateDialogIndirectParamA
GetClassNameA
PtInRect
GetSysColorBrush
InvalidateRect
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
SetWindowsHookExA
GetLastActivePopup
SetCursor
PostQuitMessage
GetWindowLongA
DefWindowProcA
SetWindowLongA
IsWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
IsWindowEnabled
GetActiveWindow
SetActiveWindow
GetParent
PeekMessageA
EnableWindow
SetWindowTextA
SetWindowPos
FindWindowExA
PostMessageA
EnumChildWindows
GetWindowThreadProcessId
CloseWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
MessageBoxA
FindWindowA
DestroyWindow
GetCursorPos
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
InflateRect
CharNextA
IsWindowUnicode

wininet

InternetOpenUrlA
InternetConnectA
InternetCrackUrlA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetOpenA

winmm

mciSendStringA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

ws2_32

WSASocketA

Sections

code
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6002afc29f19172f9791f775c1129aef

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

gdi32

mpr

shell32

user32

wininet

winmm

winspool.drv

ws2_32

Sections

code Size: 248KB - Virtual size: 248KB

.rsrc Size: 2KB - Virtual size: 4KB

.avp Size: 6KB - Virtual size: 8KB

code
Size: 248KB - Virtual size: 248KB

.rsrc
Size: 2KB - Virtual size: 4KB

.avp
Size: 6KB - Virtual size: 8KB