bbc4d9e1e013d44ee5731c234db76e57

Sharing

Copy URL

Twitter E-mail

General

Target

bbc4d9e1e013d44ee5731c234db76e57
Size

4.1MB
MD5

bbc4d9e1e013d44ee5731c234db76e57
SHA1

fbfff938fbb6a62d49594f1aa0258e45f4393ad4
SHA256

f167f8e364cfe02aed120e7cc2ab81b0f927806958699c36a56f5bac003b04cf
SHA512

2ca5f52e562a30dddd66aaca72f267dfde2f053a8960bdc54c9e25acfacc0506ef1954964e5aac4cdb09eed8b5c83197fa228b37bc76b71b68aeb0e0780f1ce5
SSDEEP

98304:JakHpIsBEoYGt/7+T3rFUkDWIzfwdbjvfCZ6zR5HI6:JakJJE53p6IDk6Z6dz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc4d9e1e013d44ee5731c234db76e57

Files

bbc4d9e1e013d44ee5731c234db76e57
.exe windows:4 windows x86 arch:x86

7a3ec6f008d3556eeb6713aed8ae14dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
HttpQueryInfoA
HttpSendRequestA
InternetSetStatusCallback
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetCombineUrlA
InternetOpenA

mfc42

ord3079
ord4080
ord4627
ord4424
ord3619
ord809
ord795
ord556
ord567
ord3663
ord3626
ord2414
ord1929
ord4275
ord1088
ord2122
ord1641
ord2860
ord6199
ord3874
ord5875
ord2864
ord5981
ord2379
ord6215
ord4299
ord3797
ord2859
ord6880
ord353
ord1187
ord6663
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord3825
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord801
ord815
ord541
ord561
ord2514
ord2919
ord2621
ord1134
ord641
ord4171
ord5861
ord6143
ord1979
ord5442
ord5186
ord1168
ord755
ord470
ord6197
ord6453
ord5265
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord2302
ord2370
ord4234
ord3092
ord4710
ord4853
ord4376
ord3698
ord765
ord6334
ord2086
ord4224
ord1768
ord2642
ord6883
ord6385
ord2135
ord818
ord1949
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord3721
ord3402
ord5277
ord5290
ord1175
ord1105
ord5683
ord4278
ord2784
ord551
ord3811
ord6282
ord2763
ord6877
ord940
ord922
ord926
ord2614
ord4202
ord5860
ord6142
ord500
ord772
ord6283
ord5710
ord2915
ord5572
ord941
ord2764
ord4277
ord6874
ord939
ord4129
ord924
ord1200
ord2818
ord540
ord537
ord1228
ord535
ord858
ord800
ord5583
ord860
ord825
ord354
ord823
ord665
ord2725
ord1576

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
fgets
strchr
_beginthreadex
rename
fread
fwrite
sprintf
fclose
fprintf
fflush
fopen
malloc
free
strncpy
exit
_mbsstr
atoi
_local_unwind2
_except_handler3
_snprintf
strstr
_mbscmp
atol
__CxxFrameHandler
_itoa
_strnicmp
_stricmp
_setmbcp
_controlfp

kernel32

FreeLibrary
ResumeThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
OutputDebugStringA
InitializeCriticalSection
MultiByteToWideChar
lstrlenA
LocalAlloc
lstrcatA
lstrcpyA
LocalFree
CloseHandle
CreateEventA
WaitForSingleObject
GetLastError
ResetEvent
SetEvent
LoadLibraryA
SizeofResource
FindResourceA
FormatMessageA
GetTempPathA
SetFileTime
MoveFileA
SetFileAttributesA
GetModuleFileNameA
CreateMutexA
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
ExitThread
TerminateThread
OpenMutexA
WriteFile
GetProcAddress
lstrcpynA
GetDiskFreeSpaceExA
GetExitCodeThread
CreateThread
GetVersionExA
SuspendThread
GetModuleHandleA
GetStartupInfoA
GetWindowsDirectoryA
WinExec
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
GetFileAttributesA
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
LockResource
Sleep
LoadResource

user32

WindowFromPoint
mouse_event
SetCursorPos
FindWindowA
GetCursorPos
EnableWindow
MessageBeep
LoadCursorA
CopyIcon
GetWindowRect
GetParent
GetDC
GetWindow
InflateRect
IsWindow
GetSysColor
SetCursor
PtInRect
ReleaseCapture
InvalidateRect
SetCapture
GetClientRect
SendMessageA
SetWindowTextA
wsprintfA
GetPropA
SetForegroundWindow
GetSystemMetrics
FillRect
SetRect
UpdateWindow
KillTimer
SetTimer
GetDesktopWindow
RedrawWindow
MessageBoxA
ReleaseDC

gdi32

SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateSolidBrush
GetTextExtentPoint32A
GetStockObject
GetObjectA
DeleteDC
CreateFontIndirectA
DeleteObject

advapi32

RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyExA
RegCloseKey

shell32

ShellExecuteA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderA

ole32

CoInitialize
CoCreateInstance
CreateStreamOnHGlobal

olepro32

ord251

setupapi

SetupIterateCabinetA

netapi32

Netbios

ws2_32

WSAEventSelect
htonl
WSAResetEvent
ntohl
ntohs
htons
WSACleanup
WSAStartup
WSAGetLastError
WSASocketA
closesocket
WSAWaitForMultipleEvents
shutdown
WSARecv
WSAEnumNetworkEvents
WSASend
WSAConnect
inet_addr
inet_ntoa
gethostbyname
WSACreateEvent
setsockopt

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a3ec6f008d3556eeb6713aed8ae14dc

Headers

File Characteristics

Imports

wininet

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

ole32

olepro32

setupapi

netapi32

ws2_32

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 7KB

.tls Size: 4KB - Virtual size: 12B

.rsrc Size: 4.0MB - Virtual size: 4.0MB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 7KB

.tls
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4.0MB - Virtual size: 4.0MB