b43a13af08689a991f79b4fed2d59107

Sharing

Copy URL Twitter E-mail

General

Target

b43a13af08689a991f79b4fed2d59107
Size

544KB
MD5

b43a13af08689a991f79b4fed2d59107
SHA1

29d3f8bb355ab5311aef1491efc3e89b2acb384c
SHA256

ca25a639c833119ea91f0e3ce333ac3a0db75fe2b710a4e954d48cbcd1bd23a4
SHA512

d32816d692113d1838034c0bda306c7abd241915b0cee42254c75bd593a6f0b24ff8fcaf0e5eb2c0152647dcf7d4d64c3d78fea4d358d0a04e1faa65b5491e09
SSDEEP

12288:oOxmqIktRtPCPE36mUOC8BGgW1S24uRoA:tmkVSEhtUgW154uqA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b43a13af08689a991f79b4fed2d59107

Files

b43a13af08689a991f79b4fed2d59107
.exe windows:4 windows x86 arch:x86

ef34b38671034673e61ae16c76bd57ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
SetCurrentDirectoryA
GetTempFileNameA
GetProfileIntA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcatA
FindResourceA
LoadResource
FreeResource
lstrcmpiA
WriteProfileSectionA
GetDriveTypeA
GetFileSize
ReadFile
CloseHandle
WriteFile
FindFirstFileA
FindClose
lstrcpyA
MulDiv
lstrlenA
GetTickCount
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
lstrcpynA
WideCharToMultiByte
GetShortPathNameA
SetErrorMode
GetLastError
GetLocalTime
WritePrivateProfileStringA
GetSystemTimeAsFileTime
SearchPathA
GetPrivateProfileStringA
CompareFileTime
RaiseException
GetFileAttributesA
SetFileAttributesA
DeleteFileA
GetProcAddress
LoadLibraryA
GlobalAddAtomA
FreeLibrary
GlobalGetAtomNameA
GlobalDeleteAtom
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
LockResource
lstrcmpA
GetProfileStringA
WriteProfileStringA
GlobalReAlloc
GetModuleFileNameA
CreateDirectoryA
MultiByteToWideChar
Sleep
CopyFileA
SetFilePointer
CreateFileA
FindNextFileA
GetCurrentThreadId
FormatMessageA
GetFileType
GetOEMCP
GetACP
SetHandleCount
GetStringTypeW
GetStringTypeA
GetCPInfo
VirtualAlloc
VirtualFree
IsBadWritePtr
HeapDestroy
GetEnvironmentVariableA
HeapCreate
GetVersion
GetCommandLineA
ExitProcess
GetFullPathNameA
GetSystemTime
GetStartupInfoA
HeapReAlloc
HeapFree
GetTimeZoneInformation
RtlUnwind
GetModuleHandleA
HeapAlloc
GetThreadSelectorEntry
GetCurrentProcess
GetCurrentThread
GetStdHandle
ReadProcessMemory
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GlobalLock
SetStdHandle
FlushFileBuffers
FreeEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

user32

InsertMenuA
TrackPopupMenu
RemoveMenu
DestroyMenu
PeekMessageA
LoadMenuA
TranslateMessage
DispatchMessageA
SetWindowTextA
GetMenu
GetSubMenu
EnableMenuItem
PostMessageA
SetWindowPos
UpdateWindow
GetWindowTextA
CreateWindowExA
DestroyWindow
ClientToScreen
ClipCursor
GetWindowRect
MoveWindow
MapWindowPoints
GetClassInfoA
RegisterClassA
GetDoubleClickTime
GetSystemMetrics
SetMenuItemInfoA
MessageBoxA
CheckDlgButton
CallWindowProcA
LoadCursorA
RegisterClassExA
GetScrollPos
ShowScrollBar
GetScrollRange
ScreenToClient
PtInRect
SetForegroundWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
ChildWindowFromPoint
GetWindowPlacement
WinHelpA
IsWindowVisible
PostQuitMessage
GetMenuItemInfoA
LoadStringA
wsprintfA
GetParent
GetScrollInfo
SetScrollInfo
BeginPaint
GetSysColor
SetRect
DrawTextA
CharUpperBuffA
GetClassLongA
GetWindowDC
IsDialogMessageA
CreatePopupMenu
GetDlgItemInt
SetScrollRange
SetScrollPos
GetCursorPos
CallNextHookEx
IsWindow
SetWindowsHookExA
UnhookWindowsHookEx
DrawFocusRect
InflateRect
EndPaint
GetWindowLongA
SetWindowLongA
GetFocus
SetFocus
InvalidateRect
SetCapture
GetClientRect
SendMessageA
DefWindowProcA
GetDC
CharUpperA
ReleaseDC
WindowFromPoint
SetMenu
CreateDialogIndirectParamA
GetCapture
ReleaseCapture
GetWindow
MessageBeep
FindWindowA
ScrollWindowEx
LoadBitmapA
IsZoomed
InsertMenuItemA
EnableScrollBar
SystemParametersInfoA
IsIconic
CheckMenuItem
IsDlgButtonChecked
LoadIconA
SetActiveWindow
EndDialog
EnableWindow
GetActiveWindow
SendDlgItemMessageA
GetDlgItemTextA
SetDlgItemTextA
GetMessagePos
SetDlgItemInt
DialogBoxIndirectParamA
ShowWindow
CharLowerA
GetDlgItem
EqualRect
IsRectEmpty
SetRectEmpty
GetAsyncKeyState
MessageBoxIndirectA
SetCursor
GetMenuState
CreateDialogParamA

gdi32

DeleteObject
SelectObject
CreateSolidBrush
GetTextMetricsA
GetDeviceCaps
CreatePatternBrush
CreateBitmap
GetObjectA
ExtTextOutA
SetTextColor
SetBkColor
GetTextExtentPointA
DeleteDC
Rectangle
SetROP2
GetStockObject
CreateDCA
LineTo
MoveToEx
CreatePen
GetTextExtentPoint32A
CreateFontIndirectA
TextOutA
GetKerningPairsA
EnumFontFamiliesExA
CreateDIBitmap
BitBlt
CreateCompatibleDC
AddFontResourceA
RemoveFontResourceA
EndDoc
StartDocA
SetAbortProc
EndPage
SetTextAlign
StartPage
RoundRect
EnumFontFamiliesA
PatBlt
SetBkMode

winspool.drv

EndDocPrinter
OpenPrinterA
StartDocPrinterA
ClosePrinter
WritePrinter

comdlg32

GetOpenFileNameA
PrintDlgA
GetSaveFileNameA

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA

shell32

ShellExecuteA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc

ole32

CoCreateInstance
CoInitialize
CoUninitialize

comctl32

ImageList_Create
ImageList_AddMasked
CreateToolbarEx
ImageList_Destroy
ImageList_Draw
ImageList_Merge
ord17
PropertySheetA
ord8
ord6
ImageList_ReplaceIcon

mpr

WNetGetConnectionA

lz32

LZOpenFileA
LZClose
LZCopy

dunzip32

dunzip

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uvwzoet
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef34b38671034673e61ae16c76bd57ef

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

comctl32

mpr

lz32

dunzip32

version

Sections

.text Size: 340KB - Virtual size: 340KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 44KB - Virtual size: 121KB

.rsrc Size: 140KB - Virtual size: 140KB

uvwzoet Size: - Virtual size: 4KB

.text
Size: 340KB - Virtual size: 340KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 44KB - Virtual size: 121KB

.rsrc
Size: 140KB - Virtual size: 140KB

uvwzoet
Size: - Virtual size: 4KB