ad6a2c75d286ee9fb08cab9c5b0b7aea

Sharing

Copy URL Twitter E-mail

General

Target

ad6a2c75d286ee9fb08cab9c5b0b7aea
Size

548KB
MD5

ad6a2c75d286ee9fb08cab9c5b0b7aea
SHA1

91c0fd9fce8919d78fe5ec4db6a0368cc6aabba6
SHA256

87b8347dbd7b1b67185abeb251b17cc4f8aef32c278fa4e7b7f7fe528ef215be
SHA512

1f73eb0f9b72479af7995ba14a4e3e2715367119dd46e87fda37e97691a2b25c429cd9d060622885b6dfd76c10a8711f26d721c4acd87de68e535f4f03b1bc42
SSDEEP

12288:cysLzyuD2gGJrASuXmNleulStFAqH4SJYZj/w0:ciuz0b2mimjI0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad6a2c75d286ee9fb08cab9c5b0b7aea

Files

ad6a2c75d286ee9fb08cab9c5b0b7aea
.exe windows:4 windows x86 arch:x86

929c4f65e15534d666fadffd8fac5e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Imports

gdi32

OffsetClipRgn
PlayMetaFile
GetKerningPairsA

user32

SetLastErrorEx
GetClassInfoExW
FrameRect
SetScrollPos
GetUserObjectSecurity
DrawStateW
GetMenuDefaultItem
DefFrameProcA
CallMsgFilterW
DdeCreateStringHandleW
RegisterClassExA
UnpackDDElParam
MessageBoxW
GetSubMenu
ChildWindowFromPoint
GetMenuStringA
DdeInitializeW
CopyAcceleratorTableW
RegisterClassA
IsCharLowerA
IsWindowEnabled
EnumDisplayMonitors
ShowWindow
SetWindowContextHelpId
DrawFocusRect
CreateMDIWindowA
UnhookWindowsHook
GetScrollRange
TranslateAccelerator
InvalidateRect
DefWindowProcW
KillTimer
SetMenuItemInfoW
MapWindowPoints
CreateAcceleratorTableA
EnumDisplayDevicesA
MapVirtualKeyA
CascadeChildWindows
FindWindowExW
GetDCEx
WindowFromDC
ReuseDDElParam
ExitWindowsEx
SetWindowPlacement
CreateWindowExA
CallWindowProcW
SendNotifyMessageW
GetInputDesktop
GetShellWindow
DdeAddData
GetClassInfoA
RegisterClipboardFormatA
GetClipboardOwner
DefMDIChildProcW
ValidateRgn
UnregisterClassA
GetClassLongW
CharNextExA
DestroyWindow
BlockInput
DlgDirListComboBoxA
DrawStateA
CopyImage
CheckMenuRadioItem
ToUnicode
GetTabbedTextExtentW
SetProcessDefaultLayout
UnhookWindowsHookEx
RegisterClipboardFormatW
WinHelpA
ReplyMessage
SetWinEventHook

advapi32

LookupPrivilegeValueA

wininet

SetUrlCacheEntryInfoA
CreateUrlCacheContainerW
InternetShowSecurityInfoByURL
ShowCertificate

kernel32

HeapReAlloc
GetModuleHandleA
TerminateProcess
GetLocalTime
WideCharToMultiByte
CompareStringW
GetCurrentThreadId
VirtualFree
IsBadWritePtr
FreeEnvironmentStringsW
GlobalFindAtomW
GetStringTypeW
SetLastError
InterlockedExchange
SetHandleCount
GetFileType
ReadFile
DeleteCriticalSection
TlsGetValue
HeapAlloc
EnterCriticalSection
QueryPerformanceCounter
HeapDestroy
GetCommandLineW
GlobalHandle
GetCommandLineA
GetLastError
GetStartupInfoW
GetTimeZoneInformation
SetFilePointer
ExitProcess
RtlUnwind
GetModuleFileNameA
WriteFile
LoadLibraryA
TlsSetValue
GetTickCount
GetProcAddress
InitializeCriticalSection
GetModuleFileNameW
SetStdHandle
GetStartupInfoA
UnhandledExceptionFilter
GetCurrentProcessId
FlushFileBuffers
TlsAlloc
InterlockedIncrement
SetEnvironmentVariableA
HeapCreate
MultiByteToWideChar
TlsFree
LoadLibraryExW
FindFirstFileW
GetCurrentProcess
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
LeaveCriticalSection
GetCPInfo
GetStdHandle
GetSystemTimeAsFileTime
FormatMessageW
CompareStringA
GetStringTypeA
OpenMutexA
VirtualAlloc
InterlockedDecrement
GetVersion
LCMapStringW
CreateMutexA
CloseHandle
GetCurrentThread
VirtualQuery
GetEnvironmentStringsW
GetSystemTime
SetConsoleMode
LCMapStringA

comctl32

ImageList_LoadImage
InitCommonControlsEx
CreateStatusWindowW
CreatePropertySheetPage
ImageList_Merge
ImageList_SetFlags
InitMUILanguage
ImageList_EndDrag
ImageList_Add
ImageList_GetIcon
ImageList_Draw
ImageList_Create

shell32

SHFileOperation
ExtractAssociatedIconA
ExtractIconExA
SHInvokePrinterCommandA
CommandLineToArgvW

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

929c4f65e15534d666fadffd8fac5e2f

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

advapi32

wininet

kernel32

comctl32

shell32

Sections

.text Size: 168KB - Virtual size: 164KB

.rdata Size: 256KB - Virtual size: 253KB

.data Size: 108KB - Virtual size: 136KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 168KB - Virtual size: 164KB

.rdata
Size: 256KB - Virtual size: 253KB

.data
Size: 108KB - Virtual size: 136KB

.rsrc
Size: 12KB - Virtual size: 9KB