9b93069580ec61d2d5211009114938ef

Sharing

Copy URL Twitter E-mail

General

Target

9b93069580ec61d2d5211009114938ef
Size

588KB
MD5

9b93069580ec61d2d5211009114938ef
SHA1

032b07638e51d0bcc1caab7417f814755fa784e3
SHA256

7697cf23bfb3bfaaaff0ffdc5e6ede78aa8a467f2234c4e3a4c955a38e4917c1
SHA512

e86dbd3c1fe440c199a9104fdb3a7bba6501505f8b25b44a13ba59cb16df142b4068e716eb885b0ce222c3863bae0f3b1efed66229ae80ed2159611b7ac36ea1
SSDEEP

12288:u56bLcSe0XLOAd8Q+sQsoaNKfGvEss0ZBHQ+DYP2t:uwEr0XLOAiQp/hvEssIbD82t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b93069580ec61d2d5211009114938ef

Files

9b93069580ec61d2d5211009114938ef
.exe windows:4 windows x86 arch:x86

83e9d5502a7b168bc169148d23760de0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

GetEffectiveClientRect
InitCommonControlsEx
ImageList_LoadImageA
ImageList_Create
CreateToolbar
ImageList_BeginDrag
DrawStatusTextW
MakeDragList
ImageList_SetBkColor
CreateMappedBitmap
ImageList_AddIcon
ImageList_SetImageCount

kernel32

GetStringTypeW
GetProcessHeaps
InterlockedExchange
GetCurrentProcess
LockResource
GetUserDefaultLCID
SetConsoleCP
EnterCriticalSection
GetTickCount
TlsGetValue
HeapAlloc
WriteConsoleOutputCharacterW
lstrcpyA
GetLocaleInfoA
ReadConsoleInputW
MapViewOfFileEx
MoveFileW
WriteConsoleOutputCharacterA
SetComputerNameA
LoadLibraryA
IsValidLocale
CreateMutexW
GetFileType
TlsFree
EnumSystemCodePagesA
CreateNamedPipeA
GetOEMCP
GetSystemTimeAdjustment
FlushFileBuffers
WriteConsoleW
HeapReAlloc
TlsAlloc
GetDateFormatA
OpenEventW
GetStartupInfoA
ReadConsoleW
FreeLibrary
InterlockedIncrement
CreateMutexA
MultiByteToWideChar
LocalFileTimeToFileTime
GetCPInfo
TerminateProcess
GetSystemTimeAsFileTime
GetLastError
UnhandledExceptionFilter
GetPrivateProfileStructW
GetEnvironmentVariableW
EnumTimeFormatsW
SetFilePointer
WaitCommEvent
GetStringTypeA
VirtualFree
SetConsoleTextAttribute
GetEnvironmentStringsW
GetEnvironmentStrings
IsValidCodePage
GetCurrentThread
SetLocaleInfoW
GlobalAddAtomA
EnumSystemLocalesA
GetStdHandle
LCMapStringW
GetCurrentDirectoryW
RaiseException
InitializeCriticalSection
CompareStringW
CreateFileMappingA
GetVersionExA
SetUnhandledExceptionFilter
LocalFlags
ExitProcess
SetConsoleCtrlHandler
HeapSize
CreateDirectoryA
GetTimeZoneInformation
SetHandleCount
InterlockedDecrement
FreeEnvironmentStringsW
LocalUnlock
GetProcessHeap
CreateFileA
DuplicateHandle
GetTimeFormatA
SetConsoleCursorInfo
GetCurrentThreadId
GetModuleFileNameA
GetCurrentProcessId
GetConsoleOutputCP
GetModuleHandleA
VirtualAlloc
FindNextFileW
IsBadWritePtr
GlobalFix
RtlUnwind
GetFullPathNameW
LCMapStringA
SetStdHandle
QueryPerformanceCounter
lstrlenW
GetLocaleInfoW
OpenProcess
CopyFileA
OpenMutexA
WriteFile
CompareStringA
DebugBreak
EnumDateFormatsExA
TlsSetValue
GetProcAddress
LeaveCriticalSection
HeapDestroy
SetConsoleTitleW
GetCommandLineA
OutputDebugStringW
SetLastError
HeapFree
IsDebuggerPresent
RtlFillMemory
WideCharToMultiByte
GlobalGetAtomNameA
GlobalFindAtomW
GetConsoleCP
SetEnvironmentVariableA
DeleteCriticalSection
ReadFile
WriteConsoleA
FindResourceA
OpenEventA
GetACP
CloseHandle
HeapCreate
GetConsoleMode
FreeEnvironmentStringsA
VirtualQuery
Sleep

shell32

ExtractAssociatedIconExW

user32

BringWindowToTop
MonitorFromWindow
GetUserObjectInformationW
ArrangeIconicWindows
CharLowerA
GetMenuInfo
GetDlgItemTextW
GetCapture
InSendMessage
RegisterClassExA
GetWindow
GetMonitorInfoW
GetKeyboardLayout
SetCaretPos
UnhookWinEvent
FindWindowW
IsCharAlphaNumericA
GetForegroundWindow
DlgDirListComboBoxW
GetCursorInfo
ChangeMenuA
EndDeferWindowPos
PtInRect
CreateWindowExA
AppendMenuA
RealGetWindowClass
DdeFreeDataHandle
GetWindowLongA
GetMenuDefaultItem
DlgDirSelectExW
GetDialogBaseUnits
SetWinEventHook
EnumDisplayDevicesA
MessageBoxA
EndPaint
EnableWindow
InvalidateRect
InsertMenuW
GetPriorityClipboardFormat
GetProcessDefaultLayout
IsDlgButtonChecked
GetDCEx
ShowCursor
CloseDesktop
RegisterClassA
RealChildWindowFromPoint
LoadBitmapW
CallNextHookEx
EnumWindowStationsW
GetDlgCtrlID
RemovePropW
IsDialogMessageA
SetCaretBlinkTime
GetDlgItemTextA
CopyAcceleratorTableA
WINNLSGetIMEHotkey
MapVirtualKeyA
GetWindowTextW
ToUnicode
EnableScrollBar
IsChild

advapi32

CryptReleaseContext
RegLoadKeyA
DuplicateTokenEx
RegOpenKeyExA
RegSetValueExW
RegCreateKeyA
GetUserNameW
CryptVerifySignatureW
RegRestoreKeyW
RegLoadKeyW
RegQueryInfoKeyW
RegEnumKeyW
RegQueryValueExW

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83e9d5502a7b168bc169148d23760de0

Headers

File Characteristics

Imports

comctl32

kernel32

shell32

user32

advapi32

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 256KB - Virtual size: 255KB

.data Size: 112KB - Virtual size: 137KB

.rsrc Size: 48KB - Virtual size: 46KB

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 256KB - Virtual size: 255KB

.data
Size: 112KB - Virtual size: 137KB

.rsrc
Size: 48KB - Virtual size: 46KB