995959d5442a9e1bb82303c1bbd1648d

Sharing

Copy URL Twitter E-mail

General

Target

995959d5442a9e1bb82303c1bbd1648d
Size

262KB
MD5

995959d5442a9e1bb82303c1bbd1648d
SHA1

bfd47528a88f1dd3b85b65639ec73a431fe02c4e
SHA256

ec82f5cbc1d3c025a90b931c51cbc2377cd7603a9986a06840118798d83351be
SHA512

8ad89091cab471ee69f07b335d1c666e7f742ff41d1ab44a9464befc790c1b59079b17b8c0ca85c1bc89545d03751afe0691e97aa8887d5bbc7f6cbbf1aa70cc
SSDEEP

6144:zsSnCfXnmZVYXPJmIrm139lHDoErNft4XANGtlBj:gfaeJmH5oEv4TtlBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
995959d5442a9e1bb82303c1bbd1648d

Files

995959d5442a9e1bb82303c1bbd1648d
.exe windows:4 windows x86 arch:x86

ad4ff0ae34012ce5ba0201826e37cdf3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueExW
RegSetValueW

kernel32

CloseHandle
CreateFileA
CreateFileW
EnterCriticalSection
ExitProcess
InitializeCriticalSection
LeaveCriticalSection
SetFilePointer
SetUnhandledExceptionFilter
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
signal
sprintf
sscanf
strcpy
wcscpy

user32

AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CreateAcceleratorTableW
CreateDialogIndirectParamW
CreateDialogParamW
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeferWindowPos
DestroyAcceleratorTable
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawMenuBar
DrawStateW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndPaint
EnumWindows
ExitWindowsEx
FlashWindow
GetActiveWindow
GetAsyncKeyState
GetClassNameW
GetClipboardData
GetCursorPos
GetDC
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetMenuStringW
GetMessageW
GetParent
GetScrollInfo
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetUpdateRect
GetWindowDC
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InsertMenuItemW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsWindowEnabled
IsZoomed
LoadAcceleratorsW
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
RedrawWindow
RegisterClassW
ReleaseDC
ScreenToClient
ScrollWindow
SendMessageW
SetFocus
SetForegroundWindow
SetScrollInfo
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
VkKeyScanW
WindowFromPoint

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad4ff0ae34012ce5ba0201826e37cdf3

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 22KB - Virtual size: 21KB

.data Size: 512B - Virtual size: 120B

.idata Size: 4KB - Virtual size: 4KB

.rdata Size: 1024B - Virtual size: 576B

.bss Size: - Virtual size: 33KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 22KB - Virtual size: 21KB

.data
Size: 512B - Virtual size: 120B

.idata
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1024B - Virtual size: 576B

.bss
Size: - Virtual size: 33KB

.rsrc
Size: 4KB - Virtual size: 3KB