bca9892b349a9eee344b04e907fa77c4

Sharing

Copy URL Twitter E-mail

General

Target

bca9892b349a9eee344b04e907fa77c4
Size

140KB
MD5

bca9892b349a9eee344b04e907fa77c4
SHA1

1440cca5402a40a097467718642ad45a91736f95
SHA256

8eb21b9826018f6171355968d70c6761abc64fccd1c352c24750fa87ced688f0
SHA512

634395f49c5b6d9d41dc64cf66f7602dbd191966e28581df8831c3027a45b285e0d4e447381250512d3a1b306c95063a66f846460e8a976e89c043c3c349f60c
SSDEEP

3072:Xu1+p1GyNv2q9lAkoAVQfbq6TKQ2qtt+R534Q:z59VXQ2Ot+j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca9892b349a9eee344b04e907fa77c4

Files

bca9892b349a9eee344b04e907fa77c4
.exe windows:4 windows x86 arch:x86

9594d5f05c0a8ec24a8c98728d21fc8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStartupInfoA
GetConsoleOutputCP
GetStringTypeA
GetLocalTime
lstrcpynA
CompareStringW
FlushFileBuffers
VirtualProtect
GetModuleHandleA

msvcrt

_stricmp
__set_app_type
pow
__p__commode
strtol
ftell
_XcptFilter
__p__fmode
__setusermatherr
log
_itow
_adjust_fdiv
_initterm
_setjmp3
exit
__pioinfo
__getmainargs
wcschr
_acmdln
_except_handler3
fputc

user32

ShowOwnedPopups
GetCursorPos
GetScrollRange
EnableWindow
WindowFromPoint
ScrollWindow
ShowWindow
ShowCursor

shell32

SHGetFolderPathA
DragFinish
ShellExecuteEx
Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderA
CommandLineToArgvW

comctl32

PropertySheetA
ImageList_GetIcon
InitCommonControls
ImageList_SetDragCursorImage
ImageList_Replace
CreateStatusWindowA
CreatePropertySheetPageW

version

VerQueryValueA
VerFindFileW
VerQueryValueW
VerLanguageNameA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
VerInstallFileA
VerInstallFileW

oleaut32

SafeArrayRedim
VariantInit
SysStringByteLen
SysReAllocStringLen
SetErrorInfo
SafeArrayCreate

ole32

RevokeDragDrop
PropVariantClear
CoSetProxyBlanket
StringFromCLSID
CoGetClassObject
CoRegisterClassObject
GetRunningObjectTable
DoDragDrop
OleIsCurrentClipboard
CoTaskMemFree
IIDFromString
CoRegisterMessageFilter
CoCreateInstance
OleUninitialize

gdi32

MoveToEx
GetTextCharsetInfo
GetTextMetricsW
GetWindowOrgEx
SetViewportExtEx
CreateDCW
CreateICA
OffsetRgn
CreateICW

advapi32

RegQueryValueExW
QueryServiceStatus
RegDeleteValueW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9594d5f05c0a8ec24a8c98728d21fc8c

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

shell32

comctl32

version

oleaut32

ole32

gdi32

advapi32

Sections

.text Size: 63KB - Virtual size: 62KB

.data Size: 49KB - Virtual size: 48KB

.rsrc Size: 26KB - Virtual size: 25KB

.text
Size: 63KB - Virtual size: 62KB

.data
Size: 49KB - Virtual size: 48KB

.rsrc
Size: 26KB - Virtual size: 25KB