9b7657fcec6e8353b54db3f2737cd818

Sharing

Copy URL Twitter E-mail

General

Target

9b7657fcec6e8353b54db3f2737cd818
Size

169KB
MD5

9b7657fcec6e8353b54db3f2737cd818
SHA1

2efd0016861e37abd09fa7a6e055644ef0144726
SHA256

e41bbb3a2b365b168280d4ddd20cdad7817c9f69c9da47515fd3e9b45979a177
SHA512

9d5fb94f52689c7554d42c0d201b9ba0925d2ed95b28bbd111705f1e389cb3e8730c5f429cccc21d5db5290097593030dcd0665b78ea1133988767059df11492
SSDEEP

3072:9oOjPtSZlU7D+FLuzFLzkBx9xE5uefNvC18CppiYTNXP/F9:9oCVSLU7KFSzFLYg5FdU8CjiYTxP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b7657fcec6e8353b54db3f2737cd818

Files

9b7657fcec6e8353b54db3f2737cd818
.exe windows:4 windows x86 arch:x86

5e271f9c52bce7cd629d5ba59360eb57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

winmm

timeGetTime
timeSetEvent

shlwapi

PathFileExistsW
PathCombineW

kernel32

WideCharToMultiByte
GetShortPathNameW
MapViewOfFile
GlobalFree
SetFilePointer
GlobalSize
CreateFileW
GetProcessAffinityMask
LocalFree
DisableThreadLibraryCalls
GetFileSize
EnumResourceTypesW
GlobalAlloc
CreateFileMappingA
GetTickCount
UnmapViewOfFile
Sleep
GetFileAttributesA
ReadFile
CreateFileA
WriteFile
LocalAlloc
CloseHandle

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueW
VerQueryValueA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

ole32

CoInitializeSecurity
CreateItemMoniker
CoSetProxyBlanket
CoGetClassObject
CoUninitialize
BindMoniker
CoTaskMemAlloc
CLSIDFromProgID
StgOpenStorage
CoInitialize
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemFree
StgIsStorageFile
StringFromGUID2
OleInitialize
GetRunningObjectTable
StgCreateDocfile
CoCreateInstance
OleLockRunning
OleUninitialize
CreateBindCtx
CLSIDFromString

gdi32

DeleteObject
SelectObject
DeleteDC
CreateCompatibleBitmap
GetDIBits
CreateSolidBrush
SelectPalette
ExtEscape
RealizePalette
CreateCompatibleDC
SetStretchBltMode
GetStockObject
StretchDIBits
CreateDIBitmap
CreateFontA
GetDeviceCaps
BitBlt
GetObjectA
CreateDIBSection
SetBkMode

user32

EqualRect
ReleaseDC
EnumDisplayDevicesA
IsWindow
wvsprintfA
GetClientRect
GetClassInfoExA
GetWindowLongA
MoveWindow
EndPaint
GetQueueStatus
BeginPaint
wsprintfA
CreateDialogParamA
SetRect
GetWindowRect
GetParent
RegisterClassExA
GetActiveWindow
CallWindowProcA
SetParent
GetSysColor
SetFocus
SendNotifyMessageA
CreateWindowExA
FindWindowA
DrawTextA
MsgWaitForMultipleObjects
IsChild
GetDesktopWindow
GetWindowTextA
SetWindowLongA
UnregisterClassA
RedrawWindow
DestroyWindow
GetWindowTextLengthA
FillRect
DestroyAcceleratorTable
KillTimer
GetDC
InvalidateRect
GetDlgItem
SetTimer
RegisterWindowMessageA
CopyRect
GetClassNameA
SendMessageTimeoutA
InvalidateRgn
GetFocus
SendMessageA
SetWindowTextA
LoadCursorA
PeekMessageA
GetWindow
PostThreadMessageA
SetCapture
CharNextA
ReleaseCapture
DispatchMessageA
DefWindowProcA
CreateAcceleratorTableA
PostMessageA
ShowWindow
SetWindowPos

advapi32

RegCreateKeyExA
CryptEncrypt
CryptImportKey
RegEnumKeyExA
CryptAcquireContextA
RegQueryValueExA
RegSetValueExA
CryptHashData
RegQueryInfoKeyA
CryptReleaseContext
CryptCreateHash
RegOpenKeyExA
CryptDestroyHash
RegDeleteValueA
RegEnumValueA
RegCloseKey
CryptGetHashParam
CryptDestroyKey
RegDeleteKeyA

wininet

InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle

gdiplus

GdipCreateBitmapFromFile
GdipFree
GdipCreateBitmapFromFileICM
GdipAlloc
GdipDisposeImage
GdipGetImagePixelFormat
GdipCloneImage

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e271f9c52bce7cd629d5ba59360eb57

Headers

File Characteristics

Imports

shell32

winmm

shlwapi

kernel32

version

setupapi

ole32

gdi32

user32

advapi32

wininet

gdiplus

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: 66KB - Virtual size: 65KB

.tls Size: 1024B - Virtual size: 96KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: 66KB - Virtual size: 65KB

.tls
Size: 1024B - Virtual size: 96KB