8f30adc2a1b81f5a717ba91451fcdcf8

Sharing

Copy URL Twitter E-mail

General

Target

8f30adc2a1b81f5a717ba91451fcdcf8
Size

377KB
MD5

8f30adc2a1b81f5a717ba91451fcdcf8
SHA1

dd811a1d02f3d2b7bb318ade5af3e9170af2a520
SHA256

56b4d997a6a76aec45fc9a88f32b8536ca5c0106f9616a02f9ac258385794921
SHA512

9d2916fd1ace9db3b22297693373e381b25e42cee99df73a3d241a886ec8a2b914341b8295b11e262fa3d5e2916d87c0a1cd2bc4b67fbc36451ef97ef7692d1d
SSDEEP

6144:y21Lg3bTNRLKBUl0h7ft3EogHjuSmZMPvARnwUcep8TN2DaTc7mSWsY25fHW/gzy:pYhRLpl0haorjcUciANggm4f25vWiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/student exchange programes.exe

Files

8f30adc2a1b81f5a717ba91451fcdcf8
.rar
student exchange programes.exe
.exe windows:5 windows x86 arch:x86

0bb7a9c8bd175ee2123754cb720bd00d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
ExitProcess
Sleep
HeapSize
HeapReAlloc
HeapCreate
GetModuleFileNameA
GetStdHandle
WriteFile
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
CloseHandle
VirtualFree
VirtualAlloc
LockResource
SetLastError
lstrcpynW
lstrlenA
WriteConsoleW
CreateFileA
FlushFileBuffers
lstrcpynA
GetCommandLineW
lstrcmpW
GetConsoleOutputCP
GetCurrentProcessId
lstrcpyW
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
MulDiv
LoadLibraryW
lstrcmpiW
GetModuleHandleW
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
GetVersionExW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
RaiseException

user32

LoadStringA
PostQuitMessage
SetMenuDefaultItem
RemoveMenu
CreatePopupMenu
TranslateAcceleratorW
GetSubMenu
PeekMessageW
IsMenu
AppendMenuW
CallNextHookEx
GetKeyState
CharLowerW
UnhookWindowsHookEx
RegisterWindowMessageW
GetSysColorBrush
WindowFromPoint
MessageBeep
FrameRect
ShowWindow
GetClassNameW
ModifyMenuW
TrackPopupMenuEx
MonitorFromPoint
GetMonitorInfoW
DrawFrameControl
GetFocus
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetActiveWindow
GetWindowThreadProcessId
IsWindowVisible
MapWindowPoints
PostMessageW
LoadStringW
LoadMenuW
LoadAcceleratorsW
DestroyMenu
InflateRect
DrawFocusRect
AdjustWindowRectEx
GetDlgCtrlID
IsWindowEnabled
KillTimer
SetTimer
ClientToScreen
GetWindowRect
GetMenu
GetCapture
SetCursor
ReleaseDC
GetWindowDC
GetSystemMetrics
SystemParametersInfoW
GetMessagePos
PtInRect
SetCapture
UpdateWindow
ScreenToClient
ReleaseCapture
OffsetRect
GetSysColor
EndPaint
BeginPaint
SetRect
DrawEdge
DrawTextW
FillRect
CallWindowProcW
GetParent
SetFocus
InvalidateRect
GetClientRect
SetWindowPos
SendMessageW
CreateWindowExW
GetClassInfoExW
LoadImageW
RegisterClassExW
DestroyWindow
SetRectEmpty
LoadCursorW
CharNextW
DefWindowProcW
IsWindow
GetWindowLongW
SetWindowLongW
wvsprintfW
SetWindowsHookExW
UnregisterClassA

gdi32

SetBrushOrgEx
CreateFontIndirectW
CreateDIBSection
CreateCompatibleBitmap
DeleteObject
GetStockObject
GetObjectW
SelectObject
SetBkMode
SetTextColor
CreatePen
MoveToEx
LineTo
DeleteDC
PatBlt
CreatePatternBrush
CreateBitmap
Rectangle
SetBkColor
BitBlt
CreateCompatibleDC

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegDeleteKeyW

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize

oleaut32

VarUI4FromStr

comctl32

ImageList_GetImageCount
InitCommonControlsEx
ImageList_GetIconSize
ImageList_Draw
_TrackMouseEvent
ImageList_Destroy
ImageList_DrawIndirect

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bb7a9c8bd175ee2123754cb720bd00d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 330KB - Virtual size: 329KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 330KB - Virtual size: 329KB