a45ce60c2625eb59f21513734311149b

Sharing

Copy URL Twitter E-mail

General

Target

a45ce60c2625eb59f21513734311149b
Size

266KB
MD5

a45ce60c2625eb59f21513734311149b
SHA1

a4d710ab77d34c9908767a45da42bcb038c7b7f0
SHA256

4657bf5149f4b3f6dba8ebdd2a8356ead079defe8552732a29dccc5f8a3f8e90
SHA512

aba341d23d8644de7f3a0cc7c857f016ca2a0d503386bfd7e103d913c3192b5290feb0be7b8e46759e1b2f75694a19bccfd46ae4d4c97dfcf71d11f5f7e26c72
SSDEEP

6144:xwy0LEcBRM4RFcN0WKMrH5RryJgWQcvH:EEcTNRFcN0+z7rlcP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a45ce60c2625eb59f21513734311149b

Files

a45ce60c2625eb59f21513734311149b
.exe windows:4 windows x86 arch:x86

04ce5770677684a4808573edc2b5de6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
GetCPInfo
ExitThread
GetACP
GetOEMCP
TerminateProcess
CreateThread
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
MulDiv
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
SetEvent
WaitForSingleObject
CloseHandle
GlobalAlloc
GlobalDeleteAtom
HeapFree
GetStartupInfoA
RaiseException
GetCommandLineA
GetModuleHandleA
RtlUnwind
GlobalAddAtomA
SetErrorMode
GlobalGetAtomNameA
GetModuleFileNameA
GetFullPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
SetEndOfFile
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
WritePrivateProfileStringA
GetProcessVersion
GetVersionExA
TlsGetValue
LoadLibraryA
GetProcAddress
EnterCriticalSection
LocalReAlloc
TlsSetValue
lstrcmpA
lstrcmpiA
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
MultiByteToWideChar
GetCurrentThread
GlobalHandle
DeleteCriticalSection
lstrcpyA
InitializeCriticalSection
LocalAlloc
GlobalFlags
SizeofResource
GetLastError
LocalFree
lstrcpynA
LCMapStringW
SetLastError
FreeLibrary
LoadResource
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
VirtualAlloc
GetStringTypeA
SetUnhandledExceptionFilter
LCMapStringA
WideCharToMultiByte
GetCurrentThreadId
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetProfileStringA
lstrcatA
GetVersion
InterlockedIncrement
InterlockedDecrement
lstrlenA

user32

MessageBoxA
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
KillTimer
SetCursor
WaitMessage
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
FindWindowA
InvalidateRect
OffsetRect
LoadStringA
ReleaseCapture
WindowFromPoint
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IntersectRect
InflateRect
PostMessageA
UpdateWindow
SystemParametersInfoA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
PostQuitMessage
DeferWindowPos
BeginDeferWindowPos
CopyRect
wvsprintfA
ShowOwnedPopups
SetScrollInfo
ShowScrollBar
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
EndDeferWindowPos
IsWindowVisible
AdjustWindowRectEx
EqualRect
EnableWindow
ScrollWindow
ScreenToClient
SetScrollRange
SendDlgItemMessageA
HideCaret
ShowCaret
UnregisterClassA
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
ExcludeUpdateRgn

gdi32

SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetTextColor
ScaleWindowExtEx
SetWindowExtEx
GetObjectA
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
GetTextExtentPointA
ExtTextOutA
PatBlt
CreateDIBitmap
CreateCompatibleDC
GetClipBox
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

DragFinish
DragQueryFileA

comctl32

ImageList_Destroy
ord17

wsock32

ioctlsocket
bind
accept
htonl
htons
recv
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
gethostbyname
closesocket
send

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04ce5770677684a4808573edc2b5de6d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

Sections

.text Size: 126KB - Virtual size: 125KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 17KB - Virtual size: 34KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 92KB - Virtual size: 92KB

.text
Size: 126KB - Virtual size: 125KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 17KB - Virtual size: 34KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 92KB - Virtual size: 92KB