9884d3355e7a6f3abe23ead51095ac07

Sharing

Copy URL Twitter E-mail

General

Target

9884d3355e7a6f3abe23ead51095ac07
Size

139KB
MD5

9884d3355e7a6f3abe23ead51095ac07
SHA1

878cdc72f66fd08093ea2cf8910f5822cce4fdbe
SHA256

34de20278d3c42a46f7cea11b9a196f0ddb562f9c59cc3f66b636117f9a96aa4
SHA512

57c54f1173bed7ab5234ae4539e4a3aedb5e6154241667a917532ea7eb029b1ac568353f59ddc93fb7b05e138bd0bbe1bf78f1ba7299451514d8c7dc0bbd5861
SSDEEP

1536:5d08pKA7VfMX6GtuvezcngDkY02WUvH1h8nW/+3ZDoioifsowyXW65ZgU:RJj+U8cpJ2gWKZdoJe5ZgU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9884d3355e7a6f3abe23ead51095ac07

Files

9884d3355e7a6f3abe23ead51095ac07
.exe windows:5 windows x86 arch:x86

bd2f580f5ff3076a5561cd1c8ad4feec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

kernel32

CreateToolhelp32Snapshot
CloseHandle
ExitProcess
SetPriorityClass
MoveFileExA
GetCurrentProcess
GetCurrentThread
SetProcessPriorityBoost
GetFileAttributesA
GetEnvironmentVariableA
SetThreadPriority
GetShortPathNameA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetVersionExA
GetLastError
CreateMutexA
ReleaseMutex
GetCurrentProcessId
FreeLibrary
GetModuleFileNameA
WaitForSingleObject
GetTickCount
CreateEventA
MultiByteToWideChar
CreateThread
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
HeapSize
Process32Next
Sleep
Process32First
GetComputerNameA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
WinExec
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
FlushFileBuffers
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW

user32

IsWindow
SwitchToThisWindow
RealGetWindowClassA
VkKeyScanW
SendInput
MapVirtualKeyA
PostMessageA
BlockInput
keybd_event
FindWindowExA
SendMessageA
GetForegroundWindow
GetWindowTextA
FindWindowA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
FreeSid
AllocateAndInitializeSid
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
IsTextUnicode

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

ntdll

ZwSystemDebugControl
NtQuerySystemInformation

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.haxed
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd2f580f5ff3076a5561cd1c8ad4feec

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

advapi32

shell32

ntdll

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 9KB - Virtual size: 9KB

.haxed Size: 4KB - Virtual size: 32KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 9KB - Virtual size: 9KB

.haxed
Size: 4KB - Virtual size: 32KB