0552821f03633c4245ef18f2b47a009c2912c1fc86fa3bba0763d6ff9ff9a6f8

Sharing

Copy URL Twitter E-mail

General

Target

0552821f03633c4245ef18f2b47a009c2912c1fc86fa3bba0763d6ff9ff9a6f8
Size

1.7MB
MD5

7830756ea6c6afeab5f75b7b72e3c5d1
SHA1

16fe138c54696bc32c8ee6256210f83f2dbcc358
SHA256

0552821f03633c4245ef18f2b47a009c2912c1fc86fa3bba0763d6ff9ff9a6f8
SHA512

68d48572089784f907cc1a81e0ac286dbf3a0fb6d13524e5eaf3c18e2dc3f6346196fdfe7ff27cd444286fb5b81ae25636cea296eecffe58834000277e4e36b5
SSDEEP

49152:HfrqnZpFlWcskhFQMm9NoXxdm0QoE7zDdae7lEOSz:HfrgEFWKs20Jx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0552821f03633c4245ef18f2b47a009c2912c1fc86fa3bba0763d6ff9ff9a6f8

Files

0552821f03633c4245ef18f2b47a009c2912c1fc86fa3bba0763d6ff9ff9a6f8
.exe windows:4 windows x86 arch:x86

c79995f0c7080e2c07e069d44d56bdd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
ReadFile
SetFilePointer
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
SizeofResource
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
SetStdHandle
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
RemoveDirectoryA
GlobalLock
DuplicateHandle
CreateFileMappingA
ResetEvent
CompareStringA
FindNextFileW
CompareStringW
GetProcessHeap
GetProcAddress
SetEvent
GetWindowsDirectoryA
GetModuleHandleW
CreateDirectoryA
LCMapStringW
GetStartupInfoA
FreeLibrary
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
GetExitCodeProcess
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
CloseHandle
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
InterlockedExchange
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetStringTypeA
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
GetDriveTypeA
LockResource
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetACP
GetEnvironmentStrings
UnmapViewOfFile
WriteFile
VirtualFree
Sleep
VirtualAlloc
ExitProcess
GetCurrentThread
GetTickCount
GetCurrentThreadId
GetVersion
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
InterlockedIncrement
GetLastError

user32

DispatchMessageA
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
SetWindowPos
EnableWindow
ShowWindow
GetParent
DestroyWindow
EndPaint
SendMessageA
ReleaseDC
GetDC
PeekMessageA
PostQuitMessage
SetForegroundWindow
GetSystemMetrics
GetWindowRect
PostMessageA
SetWindowLongA
EndDialog
SetFocus
GetClientRect
SetCursor
SetWindowTextA
GetDlgItem
ScreenToClient
GetDesktopWindow
MoveWindow
MessageBoxA
GetSysColor
GetKeyState
IsWindowVisible
InvalidateRect
wsprintfA
DefWindowProcA

gdi32

DeleteObject
SetTextColor
CreateSolidBrush
CreateCompatibleDC

ole32

CoTaskMemFree
CoTaskMemAlloc

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW

msvcrt

_exit
_cexit

Sections

.text
Size: 1.6MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c79995f0c7080e2c07e069d44d56bdd2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

advapi32

msvcrt

Sections

.text Size: 1.6MB - Virtual size: 1.9MB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 29KB - Virtual size: 29KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 1.6MB - Virtual size: 1.9MB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 32KB - Virtual size: 31KB