9a95875575d7a6215ca8d07fbd57a975

Sharing

Copy URL Twitter E-mail

General

Target

9a95875575d7a6215ca8d07fbd57a975
Size

596KB
MD5

9a95875575d7a6215ca8d07fbd57a975
SHA1

35303e644d140562fb837e4376fc6456ead87fc4
SHA256

e9a7092ad3fb0c1a92ed0e69ee6677b4007b47d1eac6ae7ae4875793bbeea3ee
SHA512

da471ee232921975466290e0a77626ebf2328d801ca53a001a52d2ae2565ff472bf947fe3b75a04b5d7a292920f06f8f3d191a720982274af0acf35de2939fb0
SSDEEP

12288:NBSySaW5AOXe5KMzPCiqKJWeyzqSBbxEGWfcAZAfbOOvB:NBSnawA4Mzg9eymQbxlWl4n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a95875575d7a6215ca8d07fbd57a975

Files

9a95875575d7a6215ca8d07fbd57a975
.exe windows:4 windows x86 arch:x86

288b3b53ed0c4d717da234b2baafea28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
ImageList_LoadImageA
InitCommonControlsEx
ImageList_DragMove
ImageList_SetDragCursorImage
MakeDragList
CreatePropertySheetPageW
ImageList_SetFlags
ImageList_Draw

user32

IsRectEmpty
CountClipboardFormats
ScrollWindowEx
LoadImageA
SwitchDesktop
SetWindowContextHelpId
MsgWaitForMultipleObjectsEx
MapVirtualKeyA
GetUpdateRect
IsWindowUnicode
DrawFrameControl
OffsetRect
CharLowerW
SendMessageTimeoutW
DefWindowProcW
DdeQueryNextServer
GetWindowTextLengthW
RegisterClassExA
SetWindowsHookW
InsertMenuItemW
DestroyWindow
GetClassLongA
ShowWindow
DdeCreateStringHandleW
RegisterClassA
IsCharAlphaNumericW
GetWindowTextLengthA
DrawIcon
LoadStringW
SetProcessDefaultLayout
InSendMessageEx
OemToCharW
IsCharAlphaNumericA
WaitMessage
IsDialogMessage
SendNotifyMessageW
CheckMenuItem
MessageBoxA
GetMonitorInfoW
CascadeChildWindows
RegisterClassExW
SetMenuItemInfoA
CloseDesktop
CreateWindowExA
RegisterClipboardFormatW
GetWindowModuleFileNameA
SetMenuInfo
TranslateAcceleratorA
DdeImpersonateClient

kernel32

VirtualAlloc
GetStringTypeA
GetEnvironmentStringsW
lstrcat
InterlockedDecrement
LCMapStringA
LCMapStringW
HeapCreate
DeleteAtom
GetModuleHandleA
GetPrivateProfileIntW
GetCommandLineA
GetModuleFileNameA
GetConsoleMode
HeapFree
RtlUnwind
GetCurrentThreadId
WriteFile
TerminateProcess
GetCurrentThread
GetTimeZoneInformation
ReadFileEx
GetPrivateProfileStructW
EnumCalendarInfoExA
SetHandleCount
LoadLibraryW
TlsSetValue
GetLocalTime
DeleteCriticalSection
GetSystemTimeAsFileTime
CreateMutexA
LeaveCriticalSection
IsBadWritePtr
OpenWaitableTimerW
FillConsoleOutputCharacterW
GetTickCount
lstrcmpiW
TlsFree
SetStdHandle
EnumCalendarInfoExW
ReadFile
QueryPerformanceCounter
InterlockedIncrement
SetFileAttributesA
GetOEMCP
GetFileType
GetModuleHandleW
FlushFileBuffers
FreeEnvironmentStringsW
CompareStringA
TlsGetValue
GetFullPathNameW
GetTempFileNameW
GetCurrencyFormatW
GlobalUnlock
GetStringTypeW
GetCurrentProcessId
InitializeCriticalSection
ExitProcess
GetACP
SetEnvironmentVariableA
SetPriorityClass
GetStdHandle
FreeEnvironmentStringsA
EnumResourceLanguagesA
GetCPInfo
OpenMutexA
CloseHandle
GetCurrentProcess
WaitForMultipleObjects
GetLastError
HeapReAlloc
SetEndOfFile
VirtualFree
GetVersion
GetProcAddress
LoadLibraryA
SetEvent
SetFilePointer
GetStartupInfoA
TlsAlloc
VirtualQuery
GetSystemTime
HeapSize
UnhandledExceptionFilter
WideCharToMultiByte
GetEnvironmentStrings
GetThreadSelectorEntry
ReadConsoleInputA
GetExitCodeProcess
ReleaseSemaphore
EnterCriticalSection
FindResourceExW
InterlockedExchange
SetLastError
MultiByteToWideChar
CompareStringW
HeapAlloc
HeapDestroy

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

288b3b53ed0c4d717da234b2baafea28

Headers

File Characteristics

Imports

comctl32

user32

kernel32

Sections

.text Size: 140KB - Virtual size: 139KB

.rdata Size: 256KB - Virtual size: 252KB

.data Size: 112KB - Virtual size: 135KB

.rsrc Size: 84KB - Virtual size: 82KB

.text
Size: 140KB - Virtual size: 139KB

.rdata
Size: 256KB - Virtual size: 252KB

.data
Size: 112KB - Virtual size: 135KB

.rsrc
Size: 84KB - Virtual size: 82KB