89bc1ff20c1a54821f7b24f6a0a2c9f5

Sharing

Copy URL Twitter E-mail

General

Target

89bc1ff20c1a54821f7b24f6a0a2c9f5
Size

342KB
MD5

89bc1ff20c1a54821f7b24f6a0a2c9f5
SHA1

be723dca9a2a58288470e89f29528c552166ebb5
SHA256

4f63c8b875201c1fcf07b38ad0ee1ccfa96d747cb8d7e21d01a63879d113c2f8
SHA512

8e4370afbc1e8d6fd4eade632d1779f6cf9c128260b07ee5a71baeeeaae412b2655dca8ed4704546bac1e2813e29741ed27a16dfa3eff22d00de82fa72aaa938
SSDEEP

6144:rq4EBz7JN6kvgduIWnYczXdL6NiSVyt4PJNjZDlFwKLpPi5v2yuCgGbW/P0B:vkHTMnBuNWf1FBLpPwbrbK0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89bc1ff20c1a54821f7b24f6a0a2c9f5

Files

89bc1ff20c1a54821f7b24f6a0a2c9f5
.exe windows:4 windows x86 arch:x86

9f904d844e57f29ecc50143ec737260e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowExA
BringWindowToTop
BeginDeferWindowPos
IsWindowUnicode
EnumChildWindows
CreateDialogIndirectParamA
OpenIcon
DestroyWindow
GetTopWindow
SetForegroundWindow
IsWindow
DispatchMessageA
GetClipboardData
CreateWindowExA
GetWindowTextLengthA
GetDialogBaseUnits

gdi32

AddFontResourceA
CreateDCW
EnumObjects
FrameRgn
ExtSelectClipRgn
CreateDiscardableBitmap
GetBkColor
CreateCompatibleDC
CreateEllipticRgn
GdiComment
FillRgn
CopyEnhMetaFileW
FloodFill

advapi32

RegCreateKeyA
GetOldestEventLogRecord
RegFlushKey
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
RegSaveKeyA

kernel32

GlobalMemoryStatus
GetLocaleInfoA
GlobalLock
SetEvent
HeapFree
GetStartupInfoA
GetPrivateProfileSectionNamesA
GetProfileStringA
GetProfileSectionA
GetProcAddress
CloseHandle
VirtualAllocEx
OpenMutexA
GetExitCodeThread
GetModuleHandleA
GetCPInfoExA
OpenEventA
MultiByteToWideChar
WideCharToMultiByte
VirtualQueryEx
HeapAlloc
SetLocaleInfoA
GlobalReAlloc
GetStringTypeA
GetOverlappedResult

winspool.drv

GetPrinterA
ClosePrinter
DeletePrinterDriverExW
AbortPrinter
DeletePrinterDriverA
DeleteFormA
AddPrinterDriverExA
SetPrinterW
AddPrinterDriverW
AddPrintProcessorA

netapi32

NetAuditRead
NetServerComputerNameAdd
NetLocalGroupDelMembers
NetConfigSet
NetFileClose
NetFileEnum
NetErrorLogRead
NetAuditClear
NetErrorLogWrite
NetGetAnyDCName
NetGetJoinInformation
NetConfigGet
NetConnectionEnum

msvcrt

__p__commode
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
_adjust_fdiv
_initterm
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f904d844e57f29ecc50143ec737260e

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

msvcrt

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 320KB - Virtual size: 423KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 320KB - Virtual size: 423KB

.rsrc
Size: 4KB - Virtual size: 3KB