a179d9c99e2c218451c8041d00cc27cd

Sharing

Copy URL Twitter E-mail

General

Target

a179d9c99e2c218451c8041d00cc27cd
Size

230KB
MD5

a179d9c99e2c218451c8041d00cc27cd
SHA1

a2b14571695d3f1a820dbf3b57a6a0b8d71af16f
SHA256

57f2f76642ef4973873b020fbed8445bdb4b99484cbd00633f08b26ac41a7397
SHA512

6e6d62b028161144e26a3b7c4a1278306412e1bba8828160fff3ed0465314ad70ffbf82a6c5a7583d55bd32a3da50da7eea3b9c8eafa1121b35cc24d8a36c951
SSDEEP

6144:eBMkJsIOHS8Y2SU4sLOJnrpyO4iezmsndm7SOZS:eyZXSU4DrfczRm7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a179d9c99e2c218451c8041d00cc27cd

Files

a179d9c99e2c218451c8041d00cc27cd
.exe windows:4 windows x86 arch:x86

be6f831eb85b60a242e8717345d4d74a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatA
lstrcpyW
GetThreadPriority
OpenFile
SearchPathA
GetProcAddress
EndUpdateResourceW
DuplicateHandle
CopyFileExW
OpenWaitableTimerW
GetTempPathW
GetFileAttributesA
GetCPInfo
CreateMailslotW
GetExitCodeProcess
SleepEx
SetErrorMode
lstrcmp
ExpandEnvironmentStringsW
GetSystemDefaultLCID
GetThreadLocale
lstrcpynA
GetExitCodeThread
lstrlenW
LoadLibraryA
GetWindowsDirectoryA
CopyFileA
GetUserDefaultLCID
EnumTimeFormatsA
lstrcat
CreateMutexA

user32

CloseWindow
LoadImageW
keybd_event
FrameRect
GetForegroundWindow
GetDesktopWindow
GetMenuItemCount
GetScrollPos
GetFocus
LoadMenuW
GetWindowRect
SetWindowRgn
InvalidateRect
CreateDesktopW
WinHelpW
MonitorFromPoint
CopyIcon
GetClassLongW
CheckRadioButton
IsMenu
PostMessageA
DestroyIcon
RegisterClassExW
MessageBoxA
CheckMenuItem
TrackPopupMenu
GetDC
GetMenuItemInfoW
GetMenuItemID
LoadBitmapW
CreateCaret
CascadeWindows
AppendMenuW
GetClientRect
DrawTextA
PeekMessageW
DrawIcon
DefWindowProcW
LoadMenuIndirectA
IsWindow
GetClassInfoA
LoadMenuA
GetSystemMetrics
ReleaseDC
SetFocus
EnumWindows
SendMessageW
TrackPopupMenuEx

gdi32

PtInRegion
ExtCreateRegion
ExtFloodFill
PolyPolygon
CreateDCA
GetViewportExtEx
GetObjectW
CreateHatchBrush
EndFormPage
SetDCBrushColor
ResetDCA

advapi32

RegSaveKeyA
RegQueryValueW
RegCreateKeyExW
RegOpenKeyA
RegOpenKeyW
RegOpenKeyW
RegRestoreKeyW
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueW
RegCloseKey

shlwapi

AssocQueryStringW
PathRemoveBackslashW
PathAddBackslashW
UrlIsOpaqueA
SHEnumKeyExW
UrlGetLocationW
StrFormatKBSizeW
ColorRGBToHLS
SHRegisterValidateTemplate
SHRegSetUSValueW
UrlHashA
StrCatBuffA
UrlIsNoHistoryW
StrSpnA
HashData
PathCreateFromUrlA
UrlHashW

version

VerQueryValueA
VerFindFileW
VerFindFileA
VerInstallFileW
VerLanguageNameW

inetcomm

MimeGetAddressFormatW
MimeOleEncodeHeader
CreateRangeList

Sections

.IrGO
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ssV
Size: 5KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZQWxu
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sHFYP
Size: 512B - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uoiaU
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.GFZPk
Size: 512B - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wC
Size: 3KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IiCpw
Size: 3KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NiE
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be6f831eb85b60a242e8717345d4d74a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

version

inetcomm

Sections

.IrGO Size: 9KB - Virtual size: 8KB

.ssV Size: 5KB - Virtual size: 358KB

.ZQWxu Size: 85KB - Virtual size: 84KB

.sHFYP Size: 512B - Virtual size: 165KB

.uoiaU Size: 12KB - Virtual size: 12KB

.GFZPk Size: 512B - Virtual size: 269KB

.wC Size: 3KB - Virtual size: 45KB

.IiCpw Size: 3KB - Virtual size: 63KB

.NiE Size: 85KB - Virtual size: 85KB

.data Size: 17KB - Virtual size: 24KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 1024B

.IrGO
Size: 9KB - Virtual size: 8KB

.ssV
Size: 5KB - Virtual size: 358KB

.ZQWxu
Size: 85KB - Virtual size: 84KB

.sHFYP
Size: 512B - Virtual size: 165KB

.uoiaU
Size: 12KB - Virtual size: 12KB

.GFZPk
Size: 512B - Virtual size: 269KB

.wC
Size: 3KB - Virtual size: 45KB

.IiCpw
Size: 3KB - Virtual size: 63KB

.NiE
Size: 85KB - Virtual size: 85KB

.data
Size: 17KB - Virtual size: 24KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 1024B