9b560ac8e380a1b3fc7e23a8db6ef60e

Sharing

Copy URL Twitter E-mail

General

Target

9b560ac8e380a1b3fc7e23a8db6ef60e
Size

280KB
MD5

9b560ac8e380a1b3fc7e23a8db6ef60e
SHA1

2e514ffac290e3782cf5de323b0f1a573dca628e
SHA256

c6191a256c4d9efdcdbd1feb188598545633c103bb2e4c8c6160146173921472
SHA512

e150211571adbaebe7d0285db3f29312e7596007b3a0deb812ae88897f543a5fa3f19b0ff05c621e4ce4de88800187ba63907f4f075f84e6463f2dc52c6e9be7
SSDEEP

6144:cu7E27bmvoZfRD2G76SToHALUhlMW5hMk+0BSWw:cMJDUw6Mk+XWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b560ac8e380a1b3fc7e23a8db6ef60e

Files

9b560ac8e380a1b3fc7e23a8db6ef60e
.exe windows:4 windows x86 arch:x86

a21d66b424d9ea480c7c0b99aef20b33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetMalloc
SHInvokePrinterCommandA
FindExecutableA
SHUpdateRecycleBinIcon
ExtractAssociatedIconW
SHGetFileInfoW
ShellHookProc
DragQueryFile
RealShellExecuteExA
SheGetDirA
ExtractIconExA
SHBrowseForFolder
SHGetPathFromIDList
SHFormatDrive
ExtractIconA
FreeIconList
DragFinish
RealShellExecuteExW
ShellExecuteW
SheChangeDirA
ExtractIconEx

advapi32

RegCreateKeyW
RegSaveKeyW
RegSetValueW
RegReplaceKeyA
RegReplaceKeyW
RegEnumKeyExA
CryptGetDefaultProviderW
RegConnectRegistryW
CryptDecrypt
CryptEncrypt
LookupPrivilegeNameA

wininet

DeleteIE3Cache
InternetGetCertByURLA
IsUrlCacheEntryExpiredW
InternetSetDialStateW
GetUrlCacheGroupAttributeA
FtpGetCurrentDirectoryA
FtpPutFileEx
HttpSendRequestExW
GetUrlCacheConfigInfoA
InternetUnlockRequestFile
InternetErrorDlg

user32

CopyIcon
GetMenuInfo
GetUpdateRgn
SetMenuItemBitmaps
ChangeDisplaySettingsA
GetWindowTextLengthW
GetWindow
FindWindowA
InvalidateRect
OpenClipboard
DefFrameProcA
GetProcessWindowStation
ExitWindowsEx
RegisterDeviceNotificationA
LoadStringW
DlgDirSelectComboBoxExA
EnumDesktopsW
GetMenu
BlockInput
GetWindowLongA

kernel32

GetACP
TlsFree
GetTickCount
VirtualFree
HeapAlloc
TerminateProcess
GetStringTypeW
GetDateFormatA
GetFileType
IsDebuggerPresent
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStdHandle
CompareStringA
HeapFree
DeleteCriticalSection
FreeEnvironmentStringsA
VirtualQuery
GetCommandLineA
SetEnvironmentVariableA
WaitForMultipleObjectsEx
HeapReAlloc
GetModuleHandleA
GetUserDefaultLCID
LCMapStringA
SetConsoleCtrlHandler
VirtualLock
GetStartupInfoA
GetLastError
GetLocaleInfoW
GetLocaleInfoA
TlsGetValue
GetModuleHandleW
SetUnhandledExceptionFilter
GetStringTypeA
MultiByteToWideChar
GetTimeZoneInformation
GetCurrentProcessId
WideCharToMultiByte
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
GetCurrentThreadId
LCMapStringW
RtlUnwind
SetHandleCount
GetEnvironmentStrings
InterlockedIncrement
GetCurrentProcess
GetSystemTimeAsFileTime
HeapDestroy
FreeEnvironmentStringsW
CreatePipe
GetProcAddress
EnterCriticalSection
VirtualAlloc
WriteFile
Sleep
EnumDateFormatsExW
InterlockedExchange
HeapSize
FreeLibrary
GetCurrentThread
GetConsoleScreenBufferInfo
GetCPInfo
LoadLibraryA
SetLastError
ExitProcess
CompareStringW
GetTimeFormatA
EnumSystemLocalesA
TlsSetValue
QueryPerformanceCounter
HeapCreate
IsValidLocale
IsValidCodePage
LeaveCriticalSection
GetModuleFileNameA
GetOEMCP

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a21d66b424d9ea480c7c0b99aef20b33

Headers

File Characteristics

Imports

shell32

advapi32

wininet

user32

kernel32

Sections

.text Size: 163KB - Virtual size: 162KB

.data Size: 114KB - Virtual size: 114KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 163KB - Virtual size: 162KB

.data
Size: 114KB - Virtual size: 114KB

.rsrc
Size: 2KB - Virtual size: 1KB