c7f556f59bb181d7249f998cbf2e16dd5a5b0dcf670c79b1a66195fc7408ea91

Sharing

Copy URL Twitter E-mail

General

Target

c7f556f59bb181d7249f998cbf2e16dd5a5b0dcf670c79b1a66195fc7408ea91
Size

2.0MB
MD5

da3331025d11b770d86a6f5557c1de40
SHA1

f8247a3691bd13a2359ecb1f8735d2b9dd62a1f2
SHA256

c7f556f59bb181d7249f998cbf2e16dd5a5b0dcf670c79b1a66195fc7408ea91
SHA512

6c850e7c06c6a05f869a7ced99fceccc5ba47adf8495581092c22d96e603395f1a266140b27f72f2244996dcd0c78f0d9cb8ad4277ccd620c50064ca26220cfa
SSDEEP

49152:KUtY/IQwLBBhUhsX2OMejQwCdkeBuhr5M9M9l99WU:KUtY/IQwLLh9G+LCjuNeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7f556f59bb181d7249f998cbf2e16dd5a5b0dcf670c79b1a66195fc7408ea91

Files

c7f556f59bb181d7249f998cbf2e16dd5a5b0dcf670c79b1a66195fc7408ea91
.exe windows:4 windows x86 arch:x86

f35c41d611700069d4124801badf964f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
RemoveDirectoryA
DeleteFileA
CopyFileA
CreateDirectoryA
GetFileAttributesA
GetModuleHandleA
GlobalMemoryStatus
FindNextFileA
GetWindowsDirectoryA
GetDiskFreeSpaceExA
GetVersionExA
GetTempFileNameA
SetThreadIdealProcessor
GetExitCodeProcess
MapViewOfFile
CreateFileMappingA
FormatMessageA
GetSystemDefaultLangID
GetUserDefaultLangID
GetSystemInfo
CreateEventA
InitializeCriticalSection
HeapAlloc
HeapReAlloc
HeapFree
GetFileType
CreateFileA
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
ReadFile
SetFilePointer
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetCurrentThreadId
GetCommandLineA
GetVersion
GetEnvironmentVariableA
lstrlenA
HeapCreate
VirtualFree
GlobalLock
IsBadWritePtr
RtlUnwind
SetStdHandle
SetEndOfFile
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
TlsGetValue
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RaiseException
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalAlloc
ResetEvent
WideCharToMultiByte
GetSystemDirectoryA
FindFirstFileA
FindClose
HeapDestroy
GlobalUnlock
OutputDebugStringA
GetStartupInfoA
GetFileSize
CreateFileW
InterlockedExchange
InterlockedCompareExchange
GetFullPathNameA
CreateProcessA
lstrcmpiA
IsProcessorFeaturePresent
GetProcessHeap
GetCurrentProcessId
SetUnhandledExceptionFilter
DeleteCriticalSection
GlobalFree
IsBadReadPtr
IsBadCodePtr
lstrcpyA
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
FreeLibrary
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetModuleFileNameA
UnmapViewOfFile
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
SetEvent
SetCurrentDirectoryA
CreateMutexA
CloseHandle
Sleep
ReleaseMutex
VirtualAlloc
GetLastError

user32

GetClassNameA
SendMessageTimeoutA
IsWindowVisible
SetWindowPlacement
EnableWindow
SetFocus
GetDlgItem
SetWindowTextA
EndDialog
DialogBoxParamA
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetClientRect
UpdateWindow
MoveWindow
PostQuitMessage
SetWindowRgn
GetWindowPlacement
SetWindowPos
ChangeDisplaySettingsExA
EnumDisplaySettingsA
RegisterClassExA
SetWindowLongA
GetSystemMenu
GetWindowLongA
SetRect
AdjustWindowRectEx
OpenIcon
CreateIconIndirect
DestroyIcon
LoadCursorA
SetClassLongA
ClientToScreen
DrawMenuBar
InsertMenuItemA
CreateMenu
EnumWindows
ChangeDisplaySettingsA
SystemParametersInfoA
GetSystemMetrics
SetCursorPos
SetMenu
ShowCursor
DestroyMenu
DestroyWindow
LoadIconA
GetWindowRect
CreateWindowExA
RegisterClassA
FindWindowA
SetForegroundWindow
SetCursor
GetWindowTextA
DeleteMenu
DefWindowProcA
IsIconic
InvalidateRect
MessageBoxA
TrackPopupMenu
GetSubMenu
ShowWindow
PostMessageA
ScreenToClient
GetCursorPos
SetKeyboardState
GetKeyboardState
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
ReleaseDC
GetDC
SendMessageA

gdi32

GetDeviceCaps
SetStretchBltMode
GetObjectA
GetDIBits
ExtCreateRegion
CreateBitmap
CreateDIBSection
SetTextColor
SetBkMode
CreateFontIndirectA
SelectObject
CreateCompatibleDC
EnumFontFamiliesExA
CreateFontA
DeleteObject
DeleteDC
GetStockObject
StretchDIBits
TextOutA

shell32

DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
DragAcceptFiles
Shell_NotifyIconA
ShellExecuteExA
SHGetSpecialFolderPathA
FindExecutableA

advapi32

RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA

comdlg32

GetSaveFileNameA

comctl32

ord17

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
GetRunningObjectTable

winmm

waveInGetDevCapsA
waveInGetNumDevs
waveOutGetDevCapsA
mciSendStringA
timeGetTime
timeGetDevCaps
timeEndPeriod
mmioStringToFOURCCA
mmioOpenA
waveOutGetNumDevs
mmioAscend
timeBeginPeriod
joyGetNumDevs
joyGetPosEx
mmioClose
mciSendCommandA
mmioDescend
mmioRead

msacm32

acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest

imm32

ImmAssociateContext

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

d3d9

Direct3DCreate9

dsound

ord1

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f35c41d611700069d4124801badf964f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comdlg32

comctl32

ole32

winmm

msacm32

imm32

version

d3d9

dsound

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 117KB - Virtual size: 2.9MB

_RDATA Size: 26KB - Virtual size: 25KB

.data1 Size: 512B - Virtual size: 200B

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 282KB - Virtual size: 282KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 117KB - Virtual size: 2.9MB

_RDATA
Size: 26KB - Virtual size: 25KB

.data1
Size: 512B - Virtual size: 200B

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 282KB - Virtual size: 282KB