3bab5e1befbdc895d9e36e76cb9a40e59de61a34109c36ed26d7dedcd5db3080

Sharing

Copy URL Twitter E-mail

General

Target

3bab5e1befbdc895d9e36e76cb9a40e59de61a34109c36ed26d7dedcd5db3080
Size

539KB
MD5

c1982b0fb28f525d86557b71a6f81591
SHA1

e47df5873305fbcdb21097936711442921cd2c3b
SHA256

3bab5e1befbdc895d9e36e76cb9a40e59de61a34109c36ed26d7dedcd5db3080
SHA512

46dcabbfb57b3665faa76bc6f58b6f252934788acabbf2ba75263d42cac8c013f6feb5992a7043123842a609bdd1b3084f2f0c8b192c2b219b87274d29f8c432
SSDEEP

12288:gE50GSHrG6W42JcycysY0V3D9wCV+anXGwnUP345WRgG3OkGGs/Lwmm:h+GSHrG6W42JcychY0FD9wCVJHw3yeJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bab5e1befbdc895d9e36e76cb9a40e59de61a34109c36ed26d7dedcd5db3080

Files

3bab5e1befbdc895d9e36e76cb9a40e59de61a34109c36ed26d7dedcd5db3080
.exe windows:4 windows x64 arch:x64

46702e615a96538f4944f7d15b37d4d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapCreate
HeapAlloc
GetModuleHandleA
CreateEventA
WaitForSingleObject
CloseHandle
HeapDestroy
GetModuleFileNameW
lstrlenW
HeapFree
GetProcessHeap
Sleep
GetSystemTimeAsFileTime

user32

LoadIconW
CreateMenu
LoadBitmapW
DrawMenuBar
GetClientRect
FillRect
RegisterClassW
CreateWindowExW
DestroyMenu
ReleaseDC
CharUpperBuffW
GetCursor
DestroyIcon
DispatchMessageW
IsZoomed
CreateAcceleratorTableW
DrawFocusRect
IsIconic
GetClassInfoExW
SetTimer
DeleteMenu
IsDialogMessageW
InsertMenuW
DrawIcon
SetScrollPos
CopyImage
GetClassInfoW
DestroyCursor
DefMDIChildProcW
EndMenu
SetMenuItemInfoW
GetScrollPos
GetMenuStringW
DefFrameProcW
FrameRect
ShowCaret
GetDlgCtrlID
GetScrollInfo
PeekMessageW
LoadCursorW
GetWindowTextW
GetSystemMenu
PostMessageW
EndPaint
GetMenuItemInfoW
GetDCEx
EnableWindow
GetScrollRange
ShowWindow
BeginPaint
DestroyWindow
LoadStringW
KillTimer
MsgWaitForMultipleObjectsEx
CreateIcon

gdi32

StretchBlt
Pie
RoundRect
CreateDCW
Polygon
SetBkMode
RectVisible
SetAbortProc
PolyBezierTo
CreateCompatibleBitmap
GetWindowOrgEx
CreateSolidBrush
AngleArc
GetTextMetricsW
CreateICW
GetEnhMetaFileHeader
SetTextColor
GetStockObject
RestoreDC
SetRectRgn
CreatePalette
MoveToEx

ole32

OleUninitialize
CoUninitialize
OleInitialize
CoCreateInstance
IsEqualGUID
CoTaskMemFree
CoInitialize
CoTaskMemAlloc

oleaut32

VariantCopyInd
SafeArrayGetUBound
VariantCopy
SafeArrayGetElement
VariantInit
SafeArrayCreate
SafeArrayPtrOfIndex
GetErrorInfo
SafeArrayGetLBound
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SysReAllocStringLen
SafeArrayAccessData
VariantClear
SafeArrayPutElement
VariantChangeType

msvcrt

memcpy
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
qsort
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
wcsrchr
memset
_amsg_exit
wcschr

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46702e615a96538f4944f7d15b37d4d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcrt

version

Sections

.text Size: 204KB - Virtual size: 203KB

.textbss Size: - Virtual size: 64KB

.rdata Size: 332KB - Virtual size: 331KB

.data Size: 512B - Virtual size: 144B

.pdata Size: 512B - Virtual size: 300B

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 512B - Virtual size: 72B

.text
Size: 204KB - Virtual size: 203KB

.textbss
Size: - Virtual size: 64KB

.rdata
Size: 332KB - Virtual size: 331KB

.data
Size: 512B - Virtual size: 144B

.pdata
Size: 512B - Virtual size: 300B

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 72B