96d372ccc3d30a9d8b9ae116d928cc9b

Sharing

Copy URL

Twitter E-mail

General

Target

96d372ccc3d30a9d8b9ae116d928cc9b
Size

336KB
MD5

96d372ccc3d30a9d8b9ae116d928cc9b
SHA1

43711cf1e69b542827159752a4580f24a2cfd083
SHA256

f195392caaefc5fcb395ca0c8dd9189ea2f1a4188ecd52f610d7c0d687cf211a
SHA512

7dd25b6734a1b1722d62c397788d8d7a91af799c275583aced7ed90ffb09bf5eaaaaffcaa267a2a5d3ee2a834634b7dda5f49b5de377854382e7ebd00db6e200
SSDEEP

6144:ioPmiCCShWKIQGCO/JO5JziH1lmoZ7/Csg+F0Fqa3pS2f5joHjrWN6DGU+:nPmiCbLIQGf/EzwmkGB+F0H3Lf5jErW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96d372ccc3d30a9d8b9ae116d928cc9b

Files

96d372ccc3d30a9d8b9ae116d928cc9b
.exe windows:4 windows x86 arch:x86

74377fa0901ef806126638f51f7127e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

kernel32

CompareStringA
CompareStringW
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DisableThreadLibraryCalls
DosDateTimeToFileTime
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCalendarInfoW
GetCommandLineA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
CompareFileTime
GetTempFileNameA
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalLock
LocalUnlock
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RemoveDirectoryA
RemoveDirectoryW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEnvironmentVariableA
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SetVolumeLabelA
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
CloseHandle
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenA
lstrlenW
GetSystemWindowsDirectoryW
WriteFile

gdi32

GetStockObject
GetDeviceCaps
DeleteObject
CreateFontIndirectW

user32

SetMenuDefaultItem
SetWindowLongW
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetCursor
SendMessageW
SendDlgItemMessageW
RemoveMenu
RegisterClipboardFormatW
RegisterClassW
PostMessageW
PeekMessageW
PeekMessageA
OemToCharBuffA
MessageBoxW
MessageBoxA
LoadStringW
LoadMenuW
LoadCursorW
CharLowerA
CharNextA
CharNextW
CharPrevA
CharToOemA
CharToOemBuffA
CharUpperA
CharUpperBuffA
CheckDlgButton
IsDlgButtonChecked
IsDialogMessageW
InsertMenuW
GetWindowTextW
GetWindowRect
GetWindowLongW
GetSubMenu
GetParent
GetForegroundWindow
GetDlgItemTextW
GetDlgItem
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
EndDialog
EnableWindow
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DestroyWindow
DestroyMenu
DeleteMenu
DefWindowProcW
CreateWindowExW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

DragQueryFileW
SHChangeNotify
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoW
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW

ole32

CoCreateInstance
CoUninitialize
CreateBindCtx
OleGetClipboard
OleSetClipboard
ReleaseStgMedium
CoInitializeEx
CoTaskMemFree

oleaut32

SafeArrayAccessData
SafeArrayCreateVector
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SystemTimeToVariantTime
VariantClear
VariantInit

shlwapi

PathRemoveFileSpecW
PathSkipRootW
PathStripToRootW
ord16
SHStrDupW
PathAppendW
StrChrW
StrCmpNIW
StrRetToBufW
StrFormatKBSizeW
StrCpyNW
PathCanonicalizeW
PathCombineW
PathCommonPrefixW
PathCompactPathExW
PathCompactPathW
PathFileExistsW
PathFindExtensionW
PathFindFileNameA
PathFindFileNameW
PathIsPrefixW
PathIsRelativeW
PathRemoveBackslashW
StrCatBuffW
PathRemoveBlanksW
StrStrW
StrToIntW
wnsprintfW

Exports

Exports

av_free
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74377fa0901ef806126638f51f7127e2

Headers

File Characteristics

Imports

ntdll

kernel32

gdi32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 28KB - Virtual size: 28KB