9aa616f80c79730d2eaaffc7b2993c93

Sharing

Copy URL Twitter E-mail

General

Target

9aa616f80c79730d2eaaffc7b2993c93
Size

447KB
MD5

9aa616f80c79730d2eaaffc7b2993c93
SHA1

0886a7a9a61c374dbd811859e574fd273beb0ccc
SHA256

8f70bd22a7f3d8595f5ce2aefeb3d1e4a9ca57bebe88faf7dcd0f57c36c2d3e5
SHA512

ec9237443b3040415b2783d1d81de9c366cd5fd96996445063d1d8ccd3e1a9690c03d69d640ebdca778b7e430e7312d5e7d6c9ddfde4bf4942d6a0fff368a984
SSDEEP

12288:P/U2iFoRgoy7rwlyJf3HlKK5cTrQAtHF4KC00k/7BiLZeDrjKLtKe:Ryyy5VKygrdtHS00kTALZwnKLtb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9aa616f80c79730d2eaaffc7b2993c93

Files

9aa616f80c79730d2eaaffc7b2993c93
.exe windows:4 windows x86 arch:x86

15ea8d0a950fd1996b56d7af5683d3a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSaveKeyW
LookupAccountNameW
RegConnectRegistryA
CryptSetProviderW
CryptDuplicateHash
LookupAccountSidA
CryptDestroyHash
RegCreateKeyExW
CryptDestroyKey
LookupSecurityDescriptorPartsA
ReportEventW
LookupPrivilegeDisplayNameW
RegEnumValueW
CryptAcquireContextW
CryptSetProviderExA

wininet

FindCloseUrlCache
FtpGetCurrentDirectoryA
GetUrlCacheEntryInfoW
FtpPutFileA
InternetQueryFortezzaStatus
InternetSetCookieA
InternetQueryOptionW
GopherOpenFileW
InternetSetOptionExW
InternetTimeToSystemTimeA
ShowClientAuthCerts
InternetGetConnectedStateExA
FtpGetFileW
HttpOpenRequestA
HttpCheckDavCompliance
DeleteUrlCacheEntry
FtpCommandW
InternetAttemptConnect
InternetErrorDlg
InternetCreateUrlW
GetUrlCacheConfigInfoW
InternetSetOptionExA
FtpGetFileSize
GetUrlCacheEntryInfoExW
InternetFindNextFileA

user32

GetDialogBaseUnits
CheckMenuRadioItem
CopyImage
CharToOemBuffW

gdi32

SetDIBColorTable
SetFontEnumeration
GetTextExtentPointA
CreateDIBSection
ResizePalette
CombineRgn
EndPage
CopyMetaFileW
PolyBezierTo

kernel32

HeapCreate
GetUserDefaultLCID
ResetEvent
OpenFileMappingA
RtlUnwind
SuspendThread
FreeLibrary
GetStdHandle
LoadLibraryA
MultiByteToWideChar
GetModuleFileNameA
GetProcessHeap
DeleteCriticalSection
VirtualAlloc
TransmitCommChar
GetProcAddress
GetTimeZoneInformation
lstrcpynA
TerminateProcess
SetHandleCount
GetCurrentProcess
EnumSystemLocalesA
TlsSetValue
GetStartupInfoW
IsDebuggerPresent
ExitProcess
FreeEnvironmentStringsW
GetLocaleInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
GetACP
IsValidLocale
WriteFile
LCMapStringW
GetModuleFileNameW
EnumDateFormatsExA
GetVersionExA
LeaveCriticalSection
GetTimeFormatA
SetLastError
GetFileType
RemoveDirectoryW
GetLastError
GetDateFormatA
GetStartupInfoA
IsValidCodePage
HeapFree
FoldStringW
TlsFree
InitializeCriticalSection
SetConsoleCtrlHandler
GetCurrentProcessId
InterlockedDecrement
WideCharToMultiByte
GetOEMCP
LCMapStringA
GetCommandLineW
Sleep
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
VirtualFree
GetSystemTimeAsFileTime
GetCommandLineA
GetStringTypeW
HeapAlloc
GetStringTypeA
InterlockedExchange
HeapDestroy
GetCPInfo
GlobalReAlloc
HeapSize
GetLocaleInfoW
InterlockedIncrement
GetCurrentThreadId
CompareStringA
HeapReAlloc
GetEnvironmentStrings
TlsGetValue
TlsAlloc
GetCurrentThread
GetTickCount
GetModuleHandleA
EnterCriticalSection
GetProfileIntW
VirtualQuery

comdlg32

PrintDlgW
ChooseColorW
PageSetupDlgA
PageSetupDlgW
ChooseColorA
ReplaceTextA

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15ea8d0a950fd1996b56d7af5683d3a9

Headers

File Characteristics

Imports

advapi32

wininet

user32

gdi32

kernel32

comdlg32

Sections

.text Size: 128KB - Virtual size: 127KB

.data Size: 312KB - Virtual size: 331KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 128KB - Virtual size: 127KB

.data
Size: 312KB - Virtual size: 331KB

.rsrc
Size: 6KB - Virtual size: 5KB