ad0281918cec9309c5d269a790a58a4d

Sharing

Copy URL Twitter E-mail

General

Target

ad0281918cec9309c5d269a790a58a4d
Size

4.9MB
MD5

ad0281918cec9309c5d269a790a58a4d
SHA1

822e9cf04177255d5fc150e61d6eb9de4162bd38
SHA256

c26ffedbd80987e8ed7a14cc72ba0ae166450c18f868c37b28c683025549aaeb
SHA512

04319f8442521f3ce5fcdd8c003ff73e86829a30f70e8afa61da1ec60240cf63dc23092a480fb5a51aaec240fc455b6e4641c129a87d4492998afb915959fe49
SSDEEP

98304:YWDnltiuD3A1GiRhOIr96hQG9oVQwz67kbX36boPOknTR+Lk2:YCnltie3AnRjr96uPnzyVEPDT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad0281918cec9309c5d269a790a58a4d

Files

ad0281918cec9309c5d269a790a58a4d
.exe windows:4 windows x86 arch:x86

e12afb73cf03655c07c0ba4f85523064

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wcsdup
calloc
iswctype
__getmainargs
_fileno
strstr
_wcslwr
swprintf
_onexit
wcscmp
exit
__badioinfo
wcstombs
_strnicmp
_itow
_snwprintf
_iob
mbstowcs
_ltoa
wcscspn
strchr
_c_exit
_CIacos
_vsnprintf
wcstok
wcsncpy
wcsstr
ceil
_wtol
_wcsnicmp
isalnum
isxdigit
_unlock
_initterm
??0exception@@QAE@ABV0@@Z
fclose
memset
printf

user32

CreatePopupMenu
CallWindowProcA
RegisterClassExA
LoadStringA
RedrawWindow
GetWindowDC
GetSubMenu
CharPrevA
SetRect
GetSysColorBrush
RegisterWindowMessageW
LoadIconA
LoadCursorW
GetWindowTextW
SetFocus
CharNextW
TrackPopupMenu
DestroyWindow
CharNextA
GetCursorPos
CharPrevW
PostMessageA
CheckRadioButton
SendMessageA
SetWindowLongA
DrawTextA
SetCapture
GetProcessWindowStation
IsWindow
GetCapture
GetMessageA
GetMenuItemCount
GetWindow
MessageBoxW
GetDesktopWindow
SetDlgItemTextA
GetSystemMenu
SetDlgItemTextW
CreateDialogParamW
GetSystemMetrics
SendDlgItemMessageW
GetClassNameW
ReleaseCapture
SendMessageW
LoadIconW

kernel32

GetWindowsDirectoryA
IsDBCSLeadByte
SetFilePointer
GetLocaleInfoW
IsDebuggerPresent
GetModuleHandleA
HeapAlloc
GetFileAttributesA
Sleep
LocalFree
GetExitCodeProcess
GetFileSize
CreateThread
CreateFileA
lstrcmpW
GetCPInfo
ExitProcess
HeapSize
InterlockedExchange
GlobalLock
GetModuleFileNameA
GetModuleHandleW
lstrcmpiA
OutputDebugStringA
GetTickCount
GetCurrentDirectoryW
CreateDirectoryW
WaitForMultipleObjects
GetExitCodeThread
GetCommandLineW
OpenEventW
GetCommandLineA
VirtualAlloc
InitializeCriticalSection
GetUserDefaultLCID
GetConsoleMode
GetLocaleInfoA
GetSystemTimeAsFileTime
WaitForSingleObject
FreeEnvironmentStringsW
WriteFile
FileTimeToLocalFileTime
GetCurrentProcess
FindResourceA
GetComputerNameW
LocalAlloc
SetHandleCount
IsBadReadPtr
MulDiv
FlushFileBuffers
LCMapStringW
GetThreadTimes
GetCurrentThreadId
OutputDebugStringW
InterlockedDecrement
SetFileAttributesW
InitializeCriticalSectionAndSpinCount
RaiseException
TlsGetValue
CreateDirectoryA
RtlUnwind
QueryPerformanceCounter
VirtualQuery
OpenMutexW
ReadFile
EnterCriticalSection
GetProcessHeap
GlobalAlloc
SetLastError
FormatMessageA
lstrcatA
TlsFree
TlsAlloc
GetACP

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 512B - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12afb73cf03655c07c0ba4f85523064

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 4KB - Virtual size: 4KB

BSS Size: 512B - Virtual size: 2.9MB

BSS Size: 4.9MB - Virtual size: 4.9MB

.tls Size: - Virtual size: 20KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 4KB - Virtual size: 4KB

BSS
Size: 512B - Virtual size: 2.9MB

BSS
Size: 4.9MB - Virtual size: 4.9MB

.tls
Size: - Virtual size: 20KB

.rsrc
Size: 17KB - Virtual size: 16KB