9b3c9cf9a21b44c7b51bd444a5a83825

General

Target

9b3c9cf9a21b44c7b51bd444a5a83825
Size

245KB
MD5

9b3c9cf9a21b44c7b51bd444a5a83825
SHA1

bbe5472a9c3caa0b9595440502c3d76707011208
SHA256

05f7ccd0425976179373b2ba34e3e2ba6ebb9f8f489077bacfe45460c05eb988
SHA512

1a3a80bd6405dc584a59775b1db50aa9ef8af64c0244ecf390cda55bb270ca0d020a574f0eaaf3478a04b785a1d4bc85b7d959e067aac48ee3749097b8c8752b
SSDEEP

6144:UkCn7Rh6yS/r4rx2Snj3LNVJ3dLXuReFPel:jyYr4Qw3LNr1Xuo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b3c9cf9a21b44c7b51bd444a5a83825

Files

9b3c9cf9a21b44c7b51bd444a5a83825
.exe windows:4 windows x86 arch:x86

29294cfdae0f5b63e5b7f77b78256625

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextA
MessageBoxIndirectA
GetWindowPlacement
BeginDeferWindowPos
GetDlgItemInt
GetLastActivePopup
SetSysColors
EnumChildWindows
GetDlgItem
GetSysColor
SetForegroundWindow
SetWindowTextA
ShowWindow
ChildWindowFromPointEx
GetNextDlgGroupItem

advapi32

RegCreateKeyExA
RegFlushKey
RegEnumKeyExA
RegReplaceKeyA
RegDeleteKeyA
RegNotifyChangeKeyValue
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegDeleteValueA

kernel32

GetProcAddress
WriteProfileSectionA
GetCurrentProcess
WritePrivateProfileStructA
WritePrivateProfileSectionA
DeleteFileA
GetHandleInformation
VirtualAlloc
GetStartupInfoA
GetComputerNameA
SetHandleInformation
GetCommandLineA
GetModuleHandleA
WriteProfileStringA
CloseHandle

winspool.drv

DeletePrinterDataExA
DeletePrinterDataA
DeletePrinter
ConfigurePortA
AdvancedDocumentPropertiesA
AddFormA
DeletePrinterConnectionA
AddPrinterA
AddJobA
AddPrinterConnectionA
ConnectToPrinterDlg
AbortPrinter

msvcrt

_acmdln
exit
_XcptFilter
_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29294cfdae0f5b63e5b7f77b78256625

Headers

File Characteristics

Imports

user32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 210KB - Virtual size: 210KB

.data Size: 512B - Virtual size: 332KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 210KB - Virtual size: 210KB

.data
Size: 512B - Virtual size: 332KB

.rsrc
Size: 19KB - Virtual size: 19KB