bc1706d4307f0f58ecbadb99069f303e

Sharing

Copy URL Twitter E-mail

General

Target

bc1706d4307f0f58ecbadb99069f303e
Size

191KB
MD5

bc1706d4307f0f58ecbadb99069f303e
SHA1

34ed02c50a77401c9a7bb2a9caa63dadb7c0b594
SHA256

d98f8ff4313641d9533390918ac7285331c7ee1d37f3974d96f1347f70926384
SHA512

036351964532d8effafb69fb535dd9a87fb895b3d29b42a606becda11206b19ecdee2509981e2778872cf634855f79b0c6ab00da208f9149631dc42a3a947067
SSDEEP

3072:aMWqFuOK/q5bQGfPOKtAlQ+ZfhvYsROYEBRqf:uMlQgPOKtABQYBf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc1706d4307f0f58ecbadb99069f303e

Files

bc1706d4307f0f58ecbadb99069f303e
.exe windows:4 windows x86 arch:x86

d76cf3b896e9c7174ed8fa5c11dba307

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
MulDiv
SetErrorMode
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GlobalFlags
WritePrivateProfileStringA
GetCurrentDirectoryA
SizeofResource
GetCPInfo
GetOEMCP
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetCurrentThread
RaiseException
CreateThread
ExitThread
TerminateProcess
SetStdHandle
GetFileType
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileTime
GetFileSize
GetFileAttributesA
FindNextFileA
CreateEventA
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
LocalAlloc
FreeLibrary
EnterCriticalSection
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
GetFullPathNameA
lstrcpynA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
MultiByteToWideChar
LoadLibraryA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetExitCodeThread
TerminateThread
GetSystemDirectoryA
CopyFileA
GetVersion
CreateMutexA
GetModuleHandleA
GetProcAddress
ReleaseMutex
Sleep
SetVolumeLabelA
SetFileAttributesA
DeleteFileA
CreateFileA
CloseHandle
GetLastError
GetDriveTypeA
CreateDirectoryA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetModuleFileNameA
GetACP
GetLocalTime
GetProfileStringA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA

comctl32

comdlg32

GetFileTitleA

gdi32

GetTextExtentPointA
PatBlt
CreateCompatibleDC
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
BitBlt
CreateDIBitmap
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape

shell32

ShellExecuteA
SHFileOperationA
SHGetFileInfoA

user32

GetMenu
RegisterClassA
GetMenuItemCount
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
LoadCursorA
GetSysColorBrush
GetMenuItemID
GetSubMenu
GetClassNameA
PtInRect
DestroyMenu
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetWindowTextLengthA
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
UnhookWindowsHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
CharUpperA
wsprintfA
EnableWindow
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
SetWindowLongA
SetTimer
LoadIconA
GetDesktopWindow
GetWindow
PostMessageA
DestroyIcon
GetWindowTextA
GetDlgCtrlID
InvalidateRect
GetLastActivePopup
GetParent
PostQuitMessage
DefWindowProcA
ExcludeUpdateRgn
UnregisterClassA
HideCaret
ShowCaret
IsWindowUnicode
DrawFocusRect
DefDlgProcA
InflateRect
CharNextA

wininet

InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

ws2_32

wsock32

WSAStartup
WSACleanup

Sections

text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d76cf3b896e9c7174ed8fa5c11dba307

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

comdlg32

gdi32

shell32

user32

wininet

winspool.drv

ws2_32

wsock32

Sections

text Size: 180KB - Virtual size: 180KB

.rsrc Size: 3KB - Virtual size: 4KB

.avp Size: 7KB - Virtual size: 8KB

text
Size: 180KB - Virtual size: 180KB

.rsrc
Size: 3KB - Virtual size: 4KB

.avp
Size: 7KB - Virtual size: 8KB