a13eae97ebd9e0206fb1af054de885a8

Sharing

Copy URL Twitter E-mail

General

Target

a13eae97ebd9e0206fb1af054de885a8
Size

480KB
MD5

a13eae97ebd9e0206fb1af054de885a8
SHA1

c491aa254adaabcde96f9063e9686535b9617f96
SHA256

680f8a9bbeb452f67195c91438b8b861608f15a133688f05538b8a0023808de4
SHA512

ccaba3722243a8daa26370a0f378dc34294d6a5ec577f937a20f9f12a4c682ed058f4f2ef4b088956f5b8a7fc8b3aed11900198ff675305f531e126281e21850
SSDEEP

6144:Fq4XzYHgYTg7fVAQpDUCpzjWtmT5pkeipqwXFtLcuOB+dXOe/KVFp9i9BsaLVmC+:DXzDLOPttx+MK8+EVmYyDoP0F2PfstZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a13eae97ebd9e0206fb1af054de885a8

Files

a13eae97ebd9e0206fb1af054de885a8
.exe windows:4 windows x86 arch:x86

85dfe36da42ba82ffdab8a4d1a38fe9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetCurrentThreadId
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
IsDBCSLeadByte
GetFileAttributesA
CreateEventA
SetCurrentDirectoryA
GetCurrentDirectoryA
CopyFileA
QueryPerformanceFrequency
ReadFile
CompareStringA
SetFilePointer
SetEndOfFile
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
InterlockedDecrement
GetModuleFileNameA
lstrcmpA
CreateProcessA
GetProcAddress
InterlockedIncrement
WideCharToMultiByte
Sleep
_hwrite
GetTempPathA
lstrcpynA
SetLastError
GetPrivateProfileSectionA
GetTempFileNameA
WriteFile
MultiByteToWideChar
DeleteFileA
VerLanguageNameA
CloseHandle
WritePrivateProfileStringA
CreateFileA
GetVersionExA
GetLocalTime
GetVersion
FindFirstFileA
GetSystemInfo
GetWindowsDirectoryA
GetLastError
GetSystemDirectoryA
FindClose
GetUserDefaultLCID
lstrcmpiA
GetTickCount
lstrcatA
SizeofResource
GlobalSize
lstrlenA
GetPrivateProfileStringA
lstrcpyA
LockResource
FindResourceA
LoadResource
HeapDestroy
HeapCreate
GetFileSize
HeapReAlloc
SystemTimeToFileTime
QueryPerformanceCounter
ResetEvent
SetEvent
WaitForSingleObject
SearchPathA
VirtualProtect
VirtualQuery
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
RaiseException
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSize
GlobalAlloc
VirtualFree
FreeLibrary
TlsGetValue
TlsAlloc
FreeResource
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
CreateThread
GetDriveTypeA
GlobalFree
GlobalUnlock
SetErrorMode
LoadLibraryA
GlobalLock
_lread
_hread
_lclose

user32

MoveWindow
GetDlgItem
SetWindowPos
GetSystemMetrics
BeginPaint
EndPaint
PostMessageA
wsprintfA
MessageBoxA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetDC
ReleaseDC
FindWindowA
SendMessageA
RegisterClassA
CreateWindowExA
IsWindow
DestroyCursor
UnhookWindowsHookEx
GetWindowRect
GetClientRect
GetSysColor
DialogBoxParamA
KillTimer
FillRect
SetTimer
IsCharAlphaNumericA
IsCharAlphaA
TranslateMessage
GetMessageTime
DispatchMessageA
SetWindowsHookExA
TrackPopupMenu
DestroyWindow
ValidateRect
WindowFromPoint
SetScrollRange
GetScrollRange
SetScrollPos
GetForegroundWindow
LoadBitmapA
EndDialog
RegisterWindowMessageA
CharUpperA
SetWindowLongA
GetClassInfoA
GetWindowLongA
PeekMessageA
DialogBoxIndirectParamA
GetKeyState
SetFocus
IsRectEmpty
SubtractRect
EqualRect
IntersectRect
CopyRect
UnionRect
PtInRect
SendDlgItemMessageA
SetWindowTextA
LoadIconA
LoadStringA
ReleaseCapture
SetCursor
LoadCursorA
SetCapture
SetDlgItemTextA
SetClassLongA
LoadCursorFromFileA
ScreenToClient
GetDesktopWindow
VkKeyScanA
MapVirtualKeyA
MessageBeep
CallNextHookEx
SetRectEmpty
InflateRect
SetParent
CharNextA
GetMessageA
GetParent
ClientToScreen
GetCursorPos
SetCursorPos
InvalidateRect
DrawFocusRect
EnumChildWindows
IsIconic
IsWindowVisible
ShowWindow
GetScrollPos
SetCaretPos
CharUpperBuffA
CharLowerBuffA
CreateCaret
SetCaretBlinkTime
ShowCaret
DestroyCaret
DrawTextA
SetForegroundWindow
GetDlgItemTextA
UnregisterClassA
GetClassInfoExA
RegisterClassExA
WaitForInputIdle
UpdateWindow
GetMessagePos
MsgWaitForMultipleObjects
CharLowerA
EnableWindow
GetSystemMenu
DestroyMenu
GetFocus
IsDlgButtonChecked
CheckRadioButton
GetWindowTextA
CreatePopupMenu
AppendMenuA
SetRect
ShowScrollBar

gdi32

SelectPalette
DeleteDC
RealizePalette
GetDeviceCaps
CreateDIBitmap
GetSystemPaletteEntries
DeleteObject
CreatePalette
SelectObject
UnrealizeObject
BitBlt
CreateSolidBrush
SetTextColor
CreateCompatibleDC
GetStockObject
GetObjectA
SetBkMode
AddFontResourceA
RestoreDC
RemoveFontResourceA
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
SaveDC
Rectangle
CreateRectRgn
CreateHatchBrush
DeleteEnhMetaFile
SetBkColor
CreateBitmap
CreateCompatibleBitmap
StretchBlt
PlayEnhMetaFile
SetEnhMetaFileBits
SetStretchBltMode
CreatePen
LineTo
SetWinMetaFileBits
SetPixel
GetPixel
MoveToEx
SetTextAlign
TextOutA
ExtTextOutA
Arc
Ellipse
SetTextCharacterExtra
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polygon
Polyline
RoundRect
GetTextMetricsA
GetTextExtentPoint32A
StretchDIBits
EnumFontFamiliesExA
CreateFontIndirectA
EnumFontsA
CreatePatternBrush
CreateEllipticRgnIndirect
CreateDCA
PatBlt

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoUninitialize
CoInitialize
CoCreateInstance

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

mciSendCommandA
timeGetDevCaps
timeBeginPeriod
timeSetEvent
timeGetTime
timeKillEvent

comctl32

InitCommonControlsEx

oleaut32

SysFreeString
SysAllocStringLen

shell32

ShellExecuteA

Exports

Exports

AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc

Sections

.text
Size: 328KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85dfe36da42ba82ffdab8a4d1a38fe9a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

version

winmm

comctl32

oleaut32

shell32

Exports

Exports

Sections

.text Size: 328KB - Virtual size: 325KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 24KB - Virtual size: 32KB

.rsrc Size: 56KB - Virtual size: 55KB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 328KB - Virtual size: 325KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 24KB - Virtual size: 32KB

.rsrc
Size: 56KB - Virtual size: 55KB

.rsrc
Size: 40KB - Virtual size: 40KB