b8653d17acb4ae51e1e52ae8918e745e

Sharing

Copy URL

Twitter E-mail

General

Target

b8653d17acb4ae51e1e52ae8918e745e
Size

284KB
MD5

b8653d17acb4ae51e1e52ae8918e745e
SHA1

29e3a73e36558113a054e2cee169904dae40e574
SHA256

d2b802347e9bcc54393ab04cc27f7ff610c96ae513b9adb0cb354dd783487e4a
SHA512

6d4eb8f7d61fb61d9e5af519aaa9c4644dbbab3dea321af196b9bed0cc687c764cad4f3d8cb35b3f40deb5f29c7e2c8db9686441ea60e3cc82f7fc9d87bd3abd
SSDEEP

3072:FSZnXOYGregdExIboYP8gQLGCTo59e9P2HOQCyF3NBAsjse8LbQ+/RWxbfae4VK:Fs+jixIb1yvR5yFNCGRITfEaA4RDUi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8653d17acb4ae51e1e52ae8918e745e

Files

b8653d17acb4ae51e1e52ae8918e745e
.exe windows:4 windows x86 arch:x86

ba5a8a7a5da04fd4d534cd6c83694feb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
TerminateProcess
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapReAlloc
HeapSize
GetACP
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetProfileStringA
GetOEMCP
GetCPInfo
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FormatMessageA
LocalFree
MulDiv
SetLastError
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetVersion
GetExitCodeProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
CreateProcessA
GetModuleFileNameA
FreeLibrary
GetLocaleInfoA
lstrcmpiA
GetProcAddress
FindFirstFileA
FindClose
LoadLibraryA
ExitProcess
CreateMutexA
GetLastError
VirtualAlloc
GetVersionExA

user32

GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowLongA
IntersectRect
IsIconic
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
GetSystemMetrics
CreateDialogIndirectParamA
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
LoadCursorA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
SetActiveWindow
SystemParametersInfoA
GetClassNameA
GetWindowRect
ModifyMenuA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
LoadMenuA
GetSubMenu
SetMenuDefaultItem
MessageBoxA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
IsWindow
DestroyIcon
RegisterWindowMessageA
InvalidateRect
LoadImageA
FillRect
OffsetRect
ReleaseDC
GetClientRect
SetTimer
FindWindowA
SendMessageA
LoadIconA
PtInRect
GetDesktopWindow
DestroyWindow
PostQuitMessage
KillTimer
EnableWindow
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
ScreenToClient
CopyRect
PeekMessageA
DestroyMenu
GetDlgItem
AdjustWindowRectEx

gdi32

RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SaveDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetObjectA
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
StretchBlt
CreateDIBitmap
GetTextExtentPointA
CreateFontA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegDeleteValueA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear
SysFreeString
SysAllocStringLen
VariantCopy
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen
SysAllocString

wininet

InternetGetConnectedState

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba5a8a7a5da04fd4d534cd6c83694feb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 176KB - Virtual size: 175KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 20KB - Virtual size: 38KB

.rsrc Size: 44KB - Virtual size: 43KB

.text
Size: 176KB - Virtual size: 175KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 20KB - Virtual size: 38KB

.rsrc
Size: 44KB - Virtual size: 43KB