9956e84835cd6de681d758fa02b0f173

Sharing

Copy URL Twitter E-mail

General

Target

9956e84835cd6de681d758fa02b0f173
Size

324KB
MD5

9956e84835cd6de681d758fa02b0f173
SHA1

536b9c42ae8756ec3b322e12c2ad366c91ce034e
SHA256

ec151cbe55a77102d0398fb70ebdd6afb2c84e975125cc9dcca9c3fbb9a8d0cf
SHA512

0c26a307fb5099420588e44190ce5e0b83b7105767c59d2f7a351538e19cb25ac2020ebcb99cdc587e7af5923550e98175e49d632f4d2983ad725783a1acafac
SSDEEP

6144:T7OyxAU8v36JVgHfc3sA1MIGwMDudhqnyDWqG9:nwU8v32P1MJD5yCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9956e84835cd6de681d758fa02b0f173

Files

9956e84835cd6de681d758fa02b0f173
.exe windows:5 windows x86 arch:x86

d1d2008921e7f962a07875dbdcc23f4a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_tzname
wcstombs
_dstbias
_daylight
strtoul
_initterm
_adjust_fdiv
__dllonexit
_onexit
isdigit
toupper
_strupr
strcspn
strncmp
strpbrk
strncat
_beginthreadex
_endthreadex
_stricmp
strtok
malloc
strstr
mktime
difftime
sscanf
strncpy
_strcmpi
_itoa
time
_ltoa
free
_strdup
swprintf
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
atof
atoi
atol
sprintf
wcslen
_timezone
wcscpy

kernel32

FreeLibrary
QueryPerformanceCounter
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
HeapAlloc
GetModuleHandleA
HeapFree
CreateTimerQueue
InterlockedIncrement
InterlockedDecrement
RegisterWaitForSingleObject
CreateEventW
CloseHandle
UnregisterWait
DeleteTimerQueueTimer
DeleteTimerQueue
CreateTimerQueueTimer
ChangeTimerQueueTimer
ReleaseMutex
WaitForSingleObject
UnregisterWaitEx
Sleep
GetComputerNameExW
HeapReAlloc
CreateFileW
DeviceIoControl
GetTickCount
HeapDestroy
CreateMutexW
HeapCreate
DisableThreadLibraryCalls
BindIoCompletionCallback
ReadFile
WriteFile
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
DeleteCriticalSection
QueueUserWorkItem
SetEvent
SetLastError
GetProcAddress

advapi32

CryptAcquireContextW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegQueryValueExW
CryptReleaseContext
CryptGenRandom

user32

SetTimer
KillTimer
SetCaretBlinkTime
SwapMouseButton
SetSysColors
SetFocus
GetFocus
GetForegroundWindow
DrawCaptionTempW
SetSysColorsTemp
LoadIconW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SendMessageTimeoutW
FindWindowW
GetWindowRect
MapWindowPoints
SetWindowPos
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
SystemParametersInfoW
GetWindow
GetDlgCtrlID
GetTopWindow
GetClientRect
HiliteMenuItem
EnableMenuItem
LoadMenuW
OffsetRect
InflateRect
GetSystemMetrics
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
LoadImageW
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
EnableWindow

comctl32

PropertySheetW

Sections

.text
Size: 62KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 236KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1d2008921e7f962a07875dbdcc23f4a

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

advapi32

user32

comctl32

Sections

.text Size: 62KB - Virtual size: 60KB

.data Size: 236KB - Virtual size: 398KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 62KB - Virtual size: 60KB

.data
Size: 236KB - Virtual size: 398KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 19KB - Virtual size: 19KB