b79db6ef0257f4084939f7489d532510

Sharing

Copy URL Twitter E-mail

General

Target

b79db6ef0257f4084939f7489d532510
Size

364KB
MD5

b79db6ef0257f4084939f7489d532510
SHA1

836c2683358fcbdab6590ff3163503556a55175f
SHA256

312aaf7e8830a0921500a47ae077dded78305f090c646e1eeff38843dfa177d5
SHA512

7c72d46ef27a82e528ba31143f538b0689a9475594281d51e3b4bf483e272049d3249d70d5f51c9619870f0ff8c64699fd43f5ba9dea3f0c08a85f9b7ce54436
SSDEEP

6144:CQuJjxJHyIJ2Qzpdt1ztxiWEcnfWJFOqYW/JlnMpNyxotMNg3h/1:CQatjt1JxiMneJFOqV/3YyxotMNK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b79db6ef0257f4084939f7489d532510

Files

b79db6ef0257f4084939f7489d532510
.exe windows:4 windows x86 arch:x86

6e9053c43db5b6e85ab76cf5b4941f1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
SetEndOfFile
GetDevicePowerState
GetVolumePathNameA
GetFileAttributesExA
EnumTimeFormatsA
UnlockFileEx
ResetEvent
GlobalReAlloc
GetDllDirectoryA
LZInit
SetTimeZoneInformation
GetShortPathNameA
lstrcpyA
WriteConsoleInputA
HeapSize
GetUserGeoID
GetTempPathA
SetCommConfig
TermsrvAppInstallMode
GetModuleFileNameA
GetPriorityClass
GlobalSize
GetProcessVersion
OpenFileMappingA
VirtualAllocEx
lstrcpyA
GlobalAlloc
FindFirstVolumeMountPointA
GetLocaleInfoA
EnumSystemCodePagesA
SetFilePointerEx
GetCommTimeouts
GetFileSize
GetCurrentThread
FindFirstFileExW
GetFileTime
FlushConsoleInputBuffer
WriteConsoleA
RemoveDirectoryA
ExitThread
LoadLibraryExA
GetConsoleAliasExesA
GlobalFindAtomA
GetProcessHeaps
Heap32ListNext
FlushFileBuffers
PrepareTape
SetDllDirectoryA
GetConsoleAliasExesLengthA
IsBadWritePtr
ReleaseMutex
GetUserDefaultLCID
FileTimeToSystemTime
LocalReAlloc
ClearCommBreak
GetPrivateProfileIntA
ReadFileEx
IsBadCodePtr
LoadLibraryA
GetLogicalDrives
GlobalUnlock
ReadConsoleInputA
WaitForDebugEvent
GetFileInformationByHandle
CreateTimerQueueTimer
GetStdHandle
EnumSystemLocalesA
OpenSemaphoreA
lstrcpyW
FindResourceExA
GetWindowsDirectoryA
CancelTimerQueueTimer
PulseEvent
GetThreadContext
Heap32First
GetConsoleTitleA
LocalHandle
OpenWaitableTimerA
CreateTimerQueue
OpenJobObjectA
GetCurrentThreadId
CreateDirectoryExA
GetFileAttributesA
GetSystemWindowsDirectoryA

user32

AllowForegroundActivation
CheckRadioButton
MapVirtualKeyExW
CreateWindowStationA
TranslateMessage
EnumPropsExA
OpenDesktopA
CreateIconFromResourceEx
CreateWindowExA
GetClassNameA
RemovePropA
ActivateKeyboardLayout
TrackPopupMenuEx
GetMenu
GetWindowInfo
ClientToScreen
AlignRects
OemKeyScan
AppendMenuA
GetTabbedTextExtentA
BringWindowToTop
CheckDlgButton
DlgDirSelectComboBoxExA
RemovePropA
SwitchToThisWindow
UnionRect
RealChildWindowFromPoint
SendIMEMessageExA
GetClassNameA
GetKeyboardState
CharUpperBuffW
FindWindowExA
GetCursorPos
SetParent
SetPropA
EnumDisplaySettingsExA
SetWindowsHookA
IsServerSideWindow
GetMenuItemCount
GetLayeredWindowAttributes
GetClassInfoExA
LoadMenuA
EndMenu
OemToCharBuffA
SystemParametersInfoA
SetDlgItemTextA
GetWindowRgnBox
LockWindowStation
DefMDIChildProcA
GetDlgItemInt
ShowOwnedPopups
IsDialogMessageA
OpenClipboard
FindWindowExA
GetRawInputDeviceList
LockSetForegroundWindow
GetRawInputDeviceInfoA
ShowCaret
GetProgmanWindow
GetInternalWindowPos
GetAltTabInfoA
FindWindowA
SetRect
IsDialogMessage
ShowScrollBar
GetRawInputDeviceInfoA
DlgDirListComboBoxA
GetWindowTextA
LoadAcceleratorsA
SetSysColors
GetMessageA
EndPaint
QuerySendMessage
InsertMenuA
GetMenu
DestroyIcon
RegisterRawInputDevices
GetClassInfoExW
GetCaretPos
ArrangeIconicWindows
GetInputDesktop
UpdatePerUserSystemParameters
PrivateExtractIconsA
IsCharLowerA

advapi32

RegCloseKey
DuplicateToken

Sections

.text
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 276KB - Virtual size: 543KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e9053c43db5b6e85ab76cf5b4941f1c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: - Virtual size: 2KB

.itext Size: 276KB - Virtual size: 543KB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 76KB - Virtual size: 74KB

.text
Size: - Virtual size: 2KB

.itext
Size: 276KB - Virtual size: 543KB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 76KB - Virtual size: 74KB