b4735ef4fe8beefe221015b57111c2d0

Sharing

Copy URL Twitter E-mail

General

Target

b4735ef4fe8beefe221015b57111c2d0
Size

459KB
MD5

b4735ef4fe8beefe221015b57111c2d0
SHA1

1f812e3b19fb95326192569106bfaea3a2cca35e
SHA256

9d77f4746db088b38a2fa76e2fd9bb5a7a71c48542aca34cf4873a3217d8c59c
SHA512

ad823f7493fe23d8abaff57780454cdea8df78a83ebe86fa4d5c091574ebce4b2236dfe53ddd19571dea7920527ce78ff0669b35318d6c871908f2d3868076f4
SSDEEP

12288:zWfDU0sOZNpRUEt0NoLeP/NY5Z4ltI/+tB:zWfg7OZdP+mLeljlOWtB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4735ef4fe8beefe221015b57111c2d0

Files

b4735ef4fe8beefe221015b57111c2d0
.exe windows:4 windows x86 arch:x86

61f3822a048478904a696f121177eaf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
VirtualProtect
GlobalLock
lstrlenA
GetDriveTypeA
GetStartupInfoA
ExitProcess
LoadLibraryExW
MapViewOfFile
GetCurrentProcess
LocalFree
LocalLock
DeleteFileA
GetLocaleInfoW
LocalSize
FileTimeToSystemTime
GetProcAddress
SetEvent
InitializeCriticalSection
WriteFile
LocalAlloc
GetEnvironmentVariableA
GetACP
SetConsoleCtrlHandler
GetCurrentThreadId
CloseHandle
GetVersionExA
DeviceIoControl
GetLastError
FormatMessageW
Sleep
CompareStringA
GetModuleHandleA
MulDiv
GetUserDefaultUILanguage
DeleteCriticalSection
UnmapViewOfFile
GetCommandLineW
CompareStringW
TerminateProcess
GetEnvironmentStrings
MultiByteToWideChar
LocalUnlock
GetFileInformationByHandle
InterlockedIncrement
SetThreadLocale
WideCharToMultiByte
GlobalUnlock
GetModuleHandleW
DuplicateHandle
QueryPerformanceCounter
lstrcpyW
FindFirstFileW
HeapFree
HeapCreate
GlobalFree
GetCurrentProcessId
SetFilePointer
CreateProcessA
CreateFileW
GetFileType
lstrcmpW
GetSystemTimeAsFileTime
lstrcatW
GetCPInfo
lstrlenW
GetFileAttributesW
GetTimeFormatW
OpenProcess
LoadResource
ReleaseSemaphore
GetTickCount
EnterCriticalSection
UnhandledExceptionFilter
WriteConsoleW
InterlockedCompareExchange
FoldStringW
SetEndOfFile
DeleteFileW
GetCurrentDirectoryW
GetOEMCP
CreateFileMappingW
GetLocalTime
LoadLibraryA
GetModuleFileNameW
LocalFileTimeToFileTime
FreeResource
ReadFile
SetLastError
VirtualFree
lstrcpynW
GetVersion
SetUnhandledExceptionFilter
lstrcmpiW
FindClose
GetDateFormatW
LocalReAlloc
GetUserDefaultLCID

msvcrt

_wcsicmp
_exit
_initterm
__p__fmode
__setusermatherr
_onexit
_cexit
wcsncmp
malloc
memmove
wcstol
_controlfp
_callnewh
_adjust_fdiv
__set_app_type
__dllonexit
qsort
time
_snwprintf
_wtol
wcsstr
wcsncpy
iswctype
wcschr
_unlock
exit
_c_exit
??0exception@@QAE@ABQBD@Z
__p__commode
_purecall
_acmdln
localtime
memcpy
__getmainargs
_XcptFilter

user32

GetSystemMetrics
GetWindowRect
UpdateWindow
GetDlgItem
DestroyMenu
SetScrollPos
IsIconic
GetMenuState
GetDlgCtrlID
GetDesktopWindow
GetSubMenu
CharLowerW
BeginPaint
OpenClipboard
DialogBoxParamW
CheckMenuItem
SetWinEventHook
IsChild
PostMessageW
CreateDialogParamW
DeleteMenu
DispatchMessageW
FillRect
PostThreadMessageW
SetRectEmpty
TranslateAcceleratorW
LoadIconW
RegisterWindowMessageW
AdjustWindowRectEx
GetMenu
MoveWindow
SetWindowPlacement
SetCursor
EnableWindow
GetDlgItemTextW
GetMessageW
GetFocus
GetWindowPlacement
InvalidateRect
DefWindowProcW
GetWindowTextW
GetForegroundWindow
IsWindowVisible
LoadAcceleratorsW
GetWindowLongW
RedrawWindow
DestroyWindow
LoadCursorW
SendDlgItemMessageW
CharUpperW
GetSystemMenu
IsClipboardFormatAvailable
SendMessageW
SetActiveWindow
RegisterClassW
SetWindowLongW
GetKeyboardLayout
GetCursorPos
ShowWindow
SetWindowTextW
EnableMenuItem
LoadStringW
SetFocus
PostQuitMessage
GetClientRect
GetDC
KillTimer
MessageBeep
TranslateMessage
PeekMessageW
ScreenToClient
UnhookWinEvent
GetWindowTextLengthW
SetDlgItemTextW
EndDialog
DestroyIcon
SetRect
GetMenuItemCount
LoadImageW
ChildWindowFromPoint
DialogBoxParamA
CreateWindowExW
CharNextW
CloseClipboard
wsprintfW
GetParent
IsDialogMessageW
MessageBoxW
DrawTextExW
RegisterClassExW
GetNextDlgTabItem
WinHelpW
ReleaseDC

gdi32

CreateDCW
SetAbortProc
TextOutW
GetStockObject
DeleteDC
LPtoDP
GetTextFaceW
GetDeviceCaps
GetTextExtentPoint32W
EndDoc
GetTextMetricsW
StartDocW
SetBkMode
AbortDoc
SetMapMode
GetObjectW
StartPage
SetWindowExtEx
EndPage
DeleteObject
CreateFontIndirectW
SetViewportExtEx
EnumFontsW
SelectObject

comdlg32

ChooseFontW
ReplaceTextW
FindTextW
CommDlgExtendedError
PrintDlgExW
GetOpenFileNameW
GetFileTitleW
PageSetupDlgW
GetSaveFileNameW

comctl32

CreateStatusWindowW

shell32

DragFinish
DragQueryFileW
DragAcceptFiles
ShellAboutW

advapi32

IsTextUnicode
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegQueryValueExA

winspool.drv

OpenPrinterW
ClosePrinter
GetPrinterDriverW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61f3822a048478904a696f121177eaf0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

comdlg32

comctl32

shell32

advapi32

winspool.drv

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 67KB - Virtual size: 73KB

.reloc Size: 512B - Virtual size: 214B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 67KB - Virtual size: 73KB

.reloc
Size: 512B - Virtual size: 214B

.rsrc
Size: 2KB - Virtual size: 1KB