9832c370c7b0e7da0c14523aac7ed6f5

Sharing

Copy URL Twitter E-mail

General

Target

9832c370c7b0e7da0c14523aac7ed6f5
Size

182KB
MD5

9832c370c7b0e7da0c14523aac7ed6f5
SHA1

9d196de236a6b67f640a427eab1f310c92357550
SHA256

dd2e44b896f94ebd990ed8ed01263dd8b156efb0c107f786dedb264b81813590
SHA512

e6779d22f6a6104d424f54377a461f75be32880231813fa2ea76bfd3426dc797aa6a727465980726473a1378f88f2eb14cb056e2c4a04b5873bd26749ac288b2
SSDEEP

3072:pZ9kn7uk4bxzpQDyiJHp6gq6/ButZzT9C9UlzEyYqODI1VnH97oG+axt:pPDhbuHAl+Bur9CiuqO057oQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9832c370c7b0e7da0c14523aac7ed6f5

Files

9832c370c7b0e7da0c14523aac7ed6f5
.exe windows:4 windows x86 arch:x86

58bd87079365c5a665430824fb63ebd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend

user32

GetWindowRect
MonitorFromPoint
LoadIconA
WindowFromDC
ScrollWindowEx
GetDesktopWindow
GetDC
GetActiveWindow
ReleaseDC
SetWindowPos
GetSystemMetrics
CreateWindowExA
CharNextW
GetMonitorInfoA
OffsetRect
DefWindowProcA
DestroyWindow
MonitorFromWindow
SetActiveWindow
EnumDisplayMonitors
LoadCursorA
GetClientRect
RegisterClassA
UnregisterClassA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

gdi32

RestoreDC
Escape
SelectObject
GetViewportOrgEx
CreateCompatibleDC
SetROP2
ResetDCW
SetDIBits
FillPath
SetMiterLimit
GetWorldTransform
CreatePatternBrush
MoveToEx
GetRgnBox
DeleteDC
StrokePath
GetStockObject
AbortDoc
GetDIBColorTable
GetGraphicsMode
CreatePalette
SelectClipPath
PolylineTo
BeginPath
SetBrushOrgEx
GetDeviceCaps
Rectangle
ModifyWorldTransform
SetWorldTransform
CreateICW
CreateCompatibleBitmap
GetClipBox
EndPage
DeleteObject
SetGraphicsMode
ExtCreatePen
OffsetRgn
SaveDC
CloseFigure
GetCurrentObject
SelectPalette
LineTo
ExtSelectClipRgn
StretchBlt
StartDocW
SetPolyFillMode
CreateDIBSection
CombineRgn
StretchDIBits
CreateBrushIndirect
EndDoc
EndPath
IntersectClipRect
StartPage
RealizePalette
EqualRgn
SetStretchBltMode
PatBlt
CreateRectRgn
CreateBitmap
SelectClipRgn
CreatePolyPolygonRgn
BitBlt
ExtEscape
GetObjectA
GetRegionData
CreateDCW
PolyBezierTo
PolyDraw

ole32

OleInitialize
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CoCreateInstance
StgOpenStorageOnILockBytes
CoGetProcessIdentifier
CoTaskMemAlloc
CoGetClassObject
CoInitialize
CoTaskMemFree
CoRevokeClassObject
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
CoUninitialize
OleFlushClipboard
CLSIDFromString

kernel32

TlsSetValue
GetCalendarInfoW
SetThreadPriority
GetVersionExA
ReleaseMutex
GetThreadLocale
GetTempPathW
FindClose
GetDateFormatW
TlsGetValue
GlobalLock
TerminateProcess
GetSystemInfo
LocalAlloc
MultiByteToWideChar
ReadFile
EnterCriticalSection
GetModuleFileNameA
WaitForSingleObject
GetEnvironmentVariableW
GetLocaleInfoA
WideCharToMultiByte
GetTickCount
IsProcessorFeaturePresent
FindNextFileA
GetCurrentProcess
CreateFileA
GetFileSize
Sleep
lstrlenW
GetWindowsDirectoryA
GetModuleHandleA
SetCurrentDirectoryA
GetACP
QueryPerformanceCounter
GetLastError
GlobalFree
lstrcmpW
DeleteCriticalSection
ReleaseSemaphore
GetDateFormatA
GetSystemDirectoryA
GetTimeFormatW
GetCurrentThread
EnumResourceNamesA
GlobalAlloc
GetTimeFormatA
InitializeCriticalSection
GetProcAddress
CreateSemaphoreA
GetUserDefaultLangID
GetLocalTime
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
GlobalUnlock
CreateMutexA
ExitProcess
CloseHandle
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThreadId
GetThreadPriority
GetSystemDefaultLCID
InterlockedExchange
TlsFree
UnhandledExceptionFilter
GetCurrentProcessId
FindFirstFileA
DeleteFileW
FreeLibrary
GetFileTime
IsDebuggerPresent
GetSystemTimeAsFileTime
GetProfileStringW
GlobalSize
GetCurrentDirectoryA
RaiseException

shlwapi

PathRemoveFileSpecA
PathAppendA

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58bd87079365c5a665430824fb63ebd6

Headers

File Characteristics

Imports

msimg32

user32

advapi32

gdi32

ole32

kernel32

shlwapi

Sections

.text Size: 102KB - Virtual size: 102KB

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: 72KB - Virtual size: 71KB

.edata Size: 1024B - Virtual size: 244KB

.text
Size: 102KB - Virtual size: 102KB

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: 72KB - Virtual size: 71KB

.edata
Size: 1024B - Virtual size: 244KB