baf251d923c4d2347ba2a46adab75b37

Sharing

Copy URL Twitter E-mail

General

Target

baf251d923c4d2347ba2a46adab75b37
Size

398KB
MD5

baf251d923c4d2347ba2a46adab75b37
SHA1

e9eabcb387ae54edfcf4edf8abf79fea5872fe5f
SHA256

77e2506563a83a2ea92c0017dc3a4be72e1fde0e388c36222a1198a628c71aef
SHA512

0e8df8556d80b2a44ec1c7294d45f18f37c0c02c23cfd0c8d9c3d9a3e2144ea8cb99705002de8e739d554a5f45191415c434d82c265073eb95dbf275ec20811b
SSDEEP

6144:gIlrYYMQscILGRmKebm2FmxnpBzkBrK4UzuzTn5mL8/Bh5ePSKOC6mWiP:HuRqexmbOQzWmm5qSlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf251d923c4d2347ba2a46adab75b37

Files

baf251d923c4d2347ba2a46adab75b37
.exe windows:4 windows x86 arch:x86

93fd7a3cc04593440d6a9f0908d4ac1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBitsToDevice
SetPaletteEntries
GetICMProfileW
PtInRegion
GetCharWidth32W
CreateEllipticRgn
GetKerningPairsW
GetPath
CreateHalftonePalette
GetCharABCWidthsW

user32

EnableWindow
SetThreadDesktop

advapi32

RegQueryMultipleValuesW
LookupAccountSidA
CryptGenRandom
RegDeleteValueW
LookupPrivilegeDisplayNameA
CryptHashData
RegConnectRegistryA
RevertToSelf
LookupPrivilegeValueW
CryptVerifySignatureA
RegEnumKeyA
RegSetKeySecurity
CryptSetProviderW
CryptDeriveKey
RegSetValueW
CryptSetProviderExW
RegEnumKeyExA

comdlg32

ReplaceTextW
FindTextW
PageSetupDlgW
PrintDlgA

kernel32

IsValidCodePage
LocalCompact
GetFileType
EnumSystemLocalesA
HeapReAlloc
GetCurrentThreadId
SetThreadLocale
ExitThread
GetEnvironmentStrings
AddAtomW
LCMapStringA
LoadLibraryA
TlsAlloc
VirtualFree
GetTickCount
GetEnvironmentStringsW
HeapCreate
WriteFileEx
SetLastError
WideCharToMultiByte
GetModuleFileNameA
CopyFileExA
EnumResourceLanguagesW
GetCurrentProcessId
CloseHandle
GetProfileSectionW
FindFirstFileW
GetCurrentProcess
GetVersionExA
GetCommandLineA
HeapFree
InitializeCriticalSection
GetTimeZoneInformation
ExitProcess
EnterCriticalSection
IsValidLocale
TlsFree
CompareStringA
HeapSize
GetLocaleInfoA
FreeEnvironmentStringsA
GetStringTypeA
HeapDestroy
TlsGetValue
RtlUnwind
GetSystemTimeAsFileTime
GetACP
MultiByteToWideChar
GetProcAddress
VirtualQuery
GetStdHandle
GetStartupInfoA
EnumTimeFormatsW
CompareStringW
TerminateProcess
GlobalAddAtomW
DeleteCriticalSection
InterlockedExchange
HeapAlloc
QueryPerformanceCounter
GetCurrentThread
SetConsoleTitleA
GetDriveTypeA
GetUserDefaultLCID
VirtualAlloc
VirtualProtect
GetTimeFormatA
LCMapStringW
TlsSetValue
UnhandledExceptionFilter
SetEnvironmentVariableA
GetStringTypeW
GetVolumeInformationA
WriteFile
GetLastError
GetDateFormatA
FreeEnvironmentStringsW
IsBadWritePtr
GetLocaleInfoW
WriteProfileSectionA
LeaveCriticalSection
GetCPInfo
GetSystemInfo
GetOEMCP
GetPrivateProfileStringW
GetModuleHandleA
SetHandleCount

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 270KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93fd7a3cc04593440d6a9f0908d4ac1a

Headers

File Characteristics

Imports

gdi32

user32

advapi32

comdlg32

kernel32

Sections

.text Size: 118KB - Virtual size: 118KB

.data Size: 270KB - Virtual size: 270KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 118KB - Virtual size: 118KB

.data
Size: 270KB - Virtual size: 270KB

.rsrc
Size: 8KB - Virtual size: 8KB