9c5fb0408b9a58bb9279e76b2b209fa3

Sharing

Copy URL

Twitter E-mail

General

Target

9c5fb0408b9a58bb9279e76b2b209fa3
Size

257KB
MD5

9c5fb0408b9a58bb9279e76b2b209fa3
SHA1

8f1f00e64dbcc5191e8f01447c4eb2e1a923ad7e
SHA256

30b652e2723d0ce2ee51a95ad0c310ec9e784694302f20580d696248740394be
SHA512

73a71300457cc701e4604bf556e82700533c2d2541a0d9305e5528110686ef0ab5d255180c58da7a075868e5b2b19b56e486715ad15e2d1bab6186a141928e35
SSDEEP

6144:3fLl33tznoEr1FrXkYyGPt0rItSVuiZ5vBLc3UelZ1K2qB3:3fxNznJrXkYX0rQNi9LckelzK2u3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c5fb0408b9a58bb9279e76b2b209fa3

Files

9c5fb0408b9a58bb9279e76b2b209fa3
.exe windows:4 windows x86 arch:x86

902d8e6c22c06d0ea992098c141386ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
VirtualAllocEx
LocalAlloc
GetSystemTimeAsFileTime
GetUserDefaultLangID
OpenWaitableTimerA
GetFullPathNameW
CreateDirectoryW
GetDiskFreeSpaceA
MulDiv
RemoveDirectoryW
GetVolumeInformationA
OpenWaitableTimerW
GetCurrentThreadId
FindAtomW
SystemTimeToFileTime
GetOEMCP
BeginUpdateResourceA
RemoveDirectoryA
ExpandEnvironmentStringsW
CreateNamedPipeA
OpenEventW
lstrcmp
MoveFileW
GetShortPathNameW
CopyFileExA
SetComputerNameW
GetMailslotInfo
GetNumberFormatA
CreatePipe
GetLongPathNameA
IsDebuggerPresent
GetSystemDirectoryA
FreeLibrary
GetModuleHandleW
lstrcmpiW
GetSystemTime
OpenMutexA
GetSystemDefaultLCID
TlsAlloc
GetProcessHeaps
CopyFileExW
lstrcpyA
EnumTimeFormatsA
GlobalGetAtomNameA
FatalAppExitW
GetAtomNameA
IsValidCodePage
IsBadStringPtrA
FindResourceW
CreateMutexA
ExpandEnvironmentStringsA
GetNumberFormatW
GetCurrentDirectoryA
OpenEventA
GetTempFileNameA
WaitForMultipleObjects
CreateEventW
GetLongPathNameW
GetTempFileNameW
LocalFree
OpenMutexW
GetShortPathNameA
SetCalendarInfoA
GetComputerNameA
AddAtomW
DosDateTimeToFileTime
SetCurrentDirectoryW
GetACP
GetAtomNameW
SleepEx
CreateSemaphoreW
GetLogicalDriveStringsA
lstrcmpi
GetThreadLocale
GetCurrentDirectoryW
SetComputerNameA
GetTimeFormatA

user32

AppendMenuA
EnumWindows
WinHelpA
ActivateKeyboardLayout
EndMenu
DialogBoxParamW
TrackPopupMenu
CreateMenu
GetMenu
DestroyIcon
MessageBoxA
GetMenuInfo
GetActiveWindow
CreateAcceleratorTableA
wsprintfA
GetDlgItemTextA
WaitForInputIdle
MoveWindow
InsertMenuItemW
LoadMenuA
RegisterWindowMessageW
IsMenu
MessageBoxIndirectW
SetParent
OffsetRect
LoadIconW
keybd_event
PostQuitMessage
GetCursorPos
CharNextW
RegisterWindowMessageA
SetWindowRgn
SetCursor
MessageBoxIndirectA
GetMenuItemCount
SetFocus
GetCapture
CreateAcceleratorTableW
EnumClipboardFormats
MonitorFromPoint
LoadBitmapW
PeekMessageA
GetDesktopWindow
WaitMessage
RegisterClassW
CreateDesktopA
UnregisterClassA
AdjustWindowRect
wvsprintfW
CharPrevW
LoadMenuIndirectA
EnableWindow
LoadImageA
SetActiveWindow
InsertMenuA
PostMessageA
EnableMenuItem
LoadImageW
GetKeyboardLayout
GetCaretPos
ShowCaret
GetIconInfo
CreatePopupMenu
SetCapture
GetSysColorBrush
RegisterClassExA
CreateDialogIndirectParamW
CreateWindowExA
GetMenuItemInfoA
GetMenuItemID
MessageBoxW
GetTopWindow
GetAsyncKeyState
GetClassInfoExA
CopyRect
SetWindowPos
FindWindowA
GetKeyState
GetMenuItemInfoW
SetDlgItemTextW
DefWindowProcA
MonitorFromRect
RegisterClassA
RegisterClassExW
FindWindowW
SendDlgItemMessageA
GetScrollPos
CreateDialogParamW
wvsprintfA
TrackPopupMenuEx
CharUpperA
SetCursorPos
SetForegroundWindow
MonitorFromWindow
GetMenuState
SetMenu
IsChild
GetMenuStringW
DestroyMenu
CreateDesktopW
SetDlgItemInt
UpdateLayeredWindow
GetDlgItemInt
GetDCEx
LoadMenuW
CopyIcon
SetWindowTextW
ShowWindow
GetMessageA
GetMessageW
WinHelpW
SetTimer
mouse_event
LoadMenuIndirectW
DialogBoxParamA
GetClassInfoA
LoadCursorW
CharNextA
GetDlgItemTextW
GetMenuStringA
PeekMessageW
MessageBeep
CharLowerA
CreateDialogParamA
GetClassInfoW
CharPrevA
CreateDialogIndirectParamA
CreateWindowExW
CharLowerW
GetKeyboardType
GetForegroundWindow
DestroyCursor
SendMessageW
ShowCursor
CheckMenuItem
LoadIconA
GetMenuItemRect
GetSubMenu
SetWindowLongW
InvalidateRgn
GetWindowRgn
DialogBoxIndirectParamW
IsDlgButtonChecked
PostMessageW
SetDlgItemTextA
GetSysColor
DefWindowProcW
DialogBoxIndirectParamA
GetSystemMetrics
LoadCursorA
CharUpperW
GetClassInfoExW
SendDlgItemMessageW
RemoveMenu
InsertMenuItemA
SetWindowTextA

gdi32

UpdateICMRegKeyW
CreateRectRgn
CreateScalableFontResourceW
DeleteObject
CreateICW
CreatePen
GetRasterizerCaps
CreateRoundRectRgn
CreateColorSpaceW
CreateFontIndirectW
SetEnhMetaFileBits
CreateFontA
CreateBitmapIndirect
StretchDIBits
CreateCompatibleDC

mprdim

ServiceMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 498KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 220KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

902d8e6c22c06d0ea992098c141386ce

Headers

File Characteristics

Imports

kernel32

user32

gdi32

mprdim

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 6KB - Virtual size: 498KB

.data Size: 220KB - Virtual size: 1.8MB

.rsrc Size: 13KB - Virtual size: 12KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 6KB - Virtual size: 498KB

.data
Size: 220KB - Virtual size: 1.8MB

.rsrc
Size: 13KB - Virtual size: 12KB